mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-30 18:56:19 +00:00
20 lines
2.2 KiB
Markdown
20 lines
2.2 KiB
Markdown
|
### [CVE-2024-53152](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53152)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
In the Linux kernel, the following vulnerability has been resolved:PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()Currently, the endpoint cleanup function dw_pcie_ep_cleanup() and EPFdeinit notify function pci_epc_deinit_notify() are called during theexecution of pex_ep_event_pex_rst_assert() i.e., when the host has assertedPERST#. But quickly after this step, refclk will also be disabled by thehost.All of the tegra194 endpoint SoCs supported as of now depend on the refclkfrom the host for keeping the controller operational. Due to thislimitation, any access to the hardware registers in the absence of refclkwill result in a whole endpoint crash. Unfortunately, most of thecontroller cleanups require accessing the hardware registers (like eDMAcleanup performed in dw_pcie_ep_cleanup(), etc...). So these cleanupfunctions can cause the crash in the endpoint SoC once host asserts PERST#.One way to address this issue is by generating the refclk in the endpointitself and not depending on the host. But that is not always possible assome of the endpoint designs do require the endpoint to consume refclk fromthe host.Thus, fix this crash by moving the controller cleanups to the start ofthe pex_ep_event_pex_rst_deassert() function. This function is calledwhenever the host has deasserted PERST# and it is guaranteed that therefclk would be active at this point. So at the start of this function(after enabling resources) the controller cleanup can be performed. Oncefinished, rest of the code execution for PERST# deassert can continue asusual.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
No PoCs from references.
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||
|
|
|