CVE-2024-42153 i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
A potential deadlock in the i2c pnx driver can cause a system hang when triggered in interrupt context, requiring a kernel patch.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-42153?
CVE-2024-42153 is a medium-severity vulnerability in Linux kernel, published on 30 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
When del_timer_sync() is called in an interrupt context it throws a warning because of potential deadlock. The timer is used only to exit from wait_for_completion() after a timeout so replacing the call with wait_for_completion_timeout() allows to remove the problematic timer and its related functions altogether.
Weakness: CWE-667
Which versions are affected by CVE-2024-42153?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-42153?
Apply the vendor's patch.
Is CVE-2024-42153 being exploited?
There is no known exploitation of CVE-2024-42153 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-47483, AZL-47613, BELL-CVE-2024-42153, DEBIAN-CVE-2024-42153, GHSA-j378-rg6j-2ff4, UBUNTU-CVE-2024-42153.