CVE-2024-39492 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown The return value of pm_runtime_get_sync() in cmdq_mbox_shutdown() will return 1 when pm runtime state is active, and we don't want to get the warning message in this case. So we change the return value < 0 for WARN_ON().

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46
https://git.kernel.org/stable/c/747a69a119c469121385543f21c2d08562968ccc
https://lore.kernel.org/linux-cve-announce/2024071017-CVE-2024-39492-384a@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-39492
https://www.cve.org/CVERecord?id=CVE-2024-39492

History

Wed, 30 Oct 2024 21:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-252
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}` cvssV3_1 `{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-10T07:14:10.967Z

Updated: 2024-12-19T09:07:14.240Z

Reserved: 2024-06-25T14:23:23.748Z

Link: CVE-2024-39492

Vulnrichment

Updated: 2024-08-02T04:26:15.418Z

NVD

Status : Awaiting Analysis

Published: 2024-07-10T08:15:11.360

Modified: 2024-11-21T09:27:48.493

Link: CVE-2024-39492

Redhat

Severity : Moderate

Publid Date: 2024-07-10T00:00:00Z

Links: CVE-2024-39492 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-39492", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-06-25T14:23:23.748Z", "datePublished": "2024-07-10T07:14:10.967Z", "dateUpdated": "2024-12-19T09:07:14.240Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T09:07:14.240Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown\n\nThe return value of pm_runtime_get_sync() in cmdq_mbox_shutdown()\nwill return 1 when pm runtime state is active, and we don't want to\nget the warning message in this case.\n\nSo we change the return value < 0 for WARN_ON()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mailbox/mtk-cmdq-mailbox.c"], "versions": [{"version": "8afe816b0c9944a11adb12628e3b700a08a55d52", "lessThan": "2d42a37a4518478f075ccf848242b4a50e313a46", "status": "affected", "versionType": "git"}, {"version": "8afe816b0c9944a11adb12628e3b700a08a55d52", "lessThan": "747a69a119c469121385543f21c2d08562968ccc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mailbox/mtk-cmdq-mailbox.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.4", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46"}, {"url": "https://git.kernel.org/stable/c/747a69a119c469121385543f21c2d08562968ccc"}], "title": "mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-252", "lang": "en", "description": "CWE-252 Unchecked Return Value"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-07-10T14:25:55.752638Z", "id": "CVE-2024-39492", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-30T20:34:15.462Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:15.418Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/747a69a119c469121385543f21c2d08562968ccc", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/747a69a119c469121385543f21c2d08562968ccc", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:15.418Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-39492", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-10T14:25:55.752638Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-252", "description": "CWE-252 Unchecked Return Value"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-11T18:07:55.953Z"}}], "cna": {"title": "mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "8afe816b0c99", "lessThan": "2d42a37a4518", "versionType": "git"}, {"status": "affected", "version": "8afe816b0c99", "lessThan": "747a69a119c4", "versionType": "git"}], "programFiles": ["drivers/mailbox/mtk-cmdq-mailbox.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"status": "unaffected", "version": "0", "lessThan": "6.7", "versionType": "semver"}, {"status": "unaffected", "version": "6.9.4", "versionType": "semver", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/mailbox/mtk-cmdq-mailbox.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/2d42a37a4518478f075ccf848242b4a50e313a46"}, {"url": "https://git.kernel.org/stable/c/747a69a119c469121385543f21c2d08562968ccc"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown\n\nThe return value of pm_runtime_get_sync() in cmdq_mbox_shutdown()\nwill return 1 when pm runtime state is active, and we don't want to\nget the warning message in this case.\n\nSo we change the return value < 0 for WARN_ON()."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:32:21.789Z"}}}, "cveMetadata": {"cveId": "CVE-2024-39492", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:32:21.789Z", "dateReserved": "2024-06-25T14:23:23.748Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-07-10T07:14:10.967Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}