CVE-2024-50057 usb: typec: tipd: Free IRQ only if it was requested before
A local attacker can trigger a kernel warning and potential crash by removing the tps6598x module when no IRQ was requested.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50057?
CVE-2024-50057 is a low-severity vulnerability in Linux kernel, published on 21 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tipd: Free IRQ only if it was requested before
In polling mode, if no IRQ was requested there is no need to free it. Call devm_free_irq() only if client->irq is set. This fixes the warning caused by the tps6598x module removal:
WARNING: CPU: 2 PID: 333 at kernel/irq/devres.c:144 devm_free_irq+0x80/0x8c ... ... Call trace: devm_free_irq+0x80/0x8c tps6598x_remove+0x28/0x88 [tps6598x] i2c_device_remove+0x2c/0x9c device_remove+0x4c/0x80 device_release_driver_internal+0x1cc/0x228 driver_detach+0x50/0x98 bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 i2c_del_driver+0x54/0x64 tps6598x_i2c_driver_exit+0x18/0xc3c [tps6598x] __arm64_sys_delete_module+0x184/0x264 invoke_syscall+0x48/0x110 el0_svc_common.constprop.0+0xc8/0xe8 do_el0_svc+0x20/0x2c el0_svc+0x28/0x98 el0t_64_sync_handler+0x13c/0x158 el0t_64_sync+0x190/0x194
Weakness: CWE-763
Which versions are affected by CVE-2024-50057?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50057?
Apply the vendor's patch.
Is CVE-2024-50057 being exploited?
There is no known exploitation of CVE-2024-50057 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-51168, AZL-51293, BELL-CVE-2024-50057, DEBIAN-CVE-2024-50057, GHSA-78cm-f398-h7cf, ROOT-OS-UBUNTU-2204-CVE-2024-50057 and 1 more.