Riskcovery

CVE-2024-45828

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

State
Published
Severity
5.5 Medium
Published
Jan 11, 2025
Updated
May 11, 2026
Reserved
Jan 9, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before a6cddf68b3405b272b5a3cad9657be0b02b34bf4Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 9d745a56aea45e47f4755bc12e6429d6314dbb54Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before a6dc4b4fda2e147e557050eaae51ff15edeb680bAffected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 19cc5767334bfe980f52421627d0826c0da86721Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 6ca2738174e4ee44edb2ab2d86ce74f015a0cc32Affected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 5.15.174 through 5.15.*Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.66 through 6.6.*Not affected
  • 6.12.5 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.