Executive Summary

Informations
Name CVE-2024-46706 First vendor Publication 2024-09-13
Vendor Cve Last vendor Modification 2024-09-19

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: fsl_lpuart: mark last busy before uart_add_one_port

With "earlycon initcall_debug=1 loglevel=8" in bootargs, kernel sometimes boot hang. It is because normal console still is not ready, but runtime suspend is called, so early console putchar will hang in waiting TRDE set in UARTSTAT.

The lpuart driver has auto suspend delay set to 3000ms, but during uart_add_one_port, a child device serial ctrl will added and probed with its pm runtime enabled(see serial_ctrl.c). The runtime suspend call path is: device_add
|-> bus_probe_device
|->device_initial_probe
|->__device_attach
|-> pm_runtime_get_sync(dev->parent);
|-> pm_request_idle(dev);
|-> pm_runtime_put(dev->parent);

So in the end, before normal console ready, the lpuart get runtime suspended. And earlycon putchar will hang.

To address the issue, mark last busy just after pm_runtime_enable, three seconds is long enough to switch from bootconsole to normal console.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46706

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3649

Sources (Detail)

https://git.kernel.org/stable/c/3ecf625d4acb71d726bc0b49403cf68388b3d58d
https://git.kernel.org/stable/c/8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68
https://git.kernel.org/stable/c/dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2025-01-08 03:05:13
  • Multiple Updates
2025-01-07 03:04:46
  • Multiple Updates
2024-12-25 03:03:24
  • Multiple Updates
2024-12-12 03:06:20
  • Multiple Updates
2024-11-23 03:03:20
  • Multiple Updates
2024-11-22 03:01:30
  • Multiple Updates
2024-11-20 02:59:50
  • Multiple Updates
2024-11-14 03:00:08
  • Multiple Updates
2024-11-09 03:00:08
  • Multiple Updates
2024-10-26 02:57:31
  • Multiple Updates
2024-10-25 02:59:23
  • Multiple Updates
2024-10-23 02:58:35
  • Multiple Updates
2024-10-03 02:53:45
  • Multiple Updates
2024-10-02 02:52:09
  • Multiple Updates
2024-09-19 21:27:27
  • Multiple Updates
2024-09-13 21:27:26
  • Multiple Updates
2024-09-13 13:27:26
  • First insertion