CVE-2024-56785 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

Medium 5.5 Published Updated

A device tree configuration error in the Linux kernel for Loongson64 MIPS systems causes runtime warnings and potential instability, requiring a patch to correct PCIe node definitions.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2024-56785?

CVE-2024-56785 is a medium-severity vulnerability in Linux kernel, published on 8 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

Fix the dtc warnings:

arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning (interrupt_provider): /bus@10000000/pci@1a000000: '#interrupt-cells' found, but node is not an interrupt provider arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning (interrupt_provider): /bus@10000000/pci@1a000000: '#interrupt-cells' found, but node is not an interrupt provider arch/mips/boot/dts/loongson/loongson64g_4core_ls7a.dtb: Warning (interrupt_map): Failed prerequisite 'interrupt_provider'

And a runtime warning introduced in commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling"):

WARNING: CPU: 0 PID: 1 at drivers/of/base.c:106 of_bus_n_addr_cells+0x9c/0xe0 Missing '#address-cells' in /bus@10000000/pci@1a000000/pci_bridge@9,0

The fix is similar to commit d89a415ff8d5 ("MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a"), which has fixed the issue for ls2k (despite its subject mentions ls7a).

Which versions are affected by CVE-2024-56785?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2024-56785?

Apply the vendor's patch.

Is CVE-2024-56785 being exploited?

There is no known exploitation of CVE-2024-56785 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as AZL-55331, AZL-55375, BELL-CVE-2024-56785, DEBIAN-CVE-2024-56785, GHSA-4g5v-5q43-rwpj, ROOT-OS-DEBIAN-11-CVE-2024-56785 and 1 more.

Is CVE-2024-56785 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free