CVE-2024-42253

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-42253
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42253.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42253
Downstream
Related
Published
2024-08-08T08:46:29.284Z
Modified
2026-03-20T12:38:44.591981Z
Summary
gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
Details

In the Linux kernel, the following vulnerability has been resolved:

gpio: pca953x: fix pca953xirqbussyncunlock race

Ensure that `i2clock' is held when setting interrupt latch and mask in pca953xirqbussync_unlock() in order to avoid races.

The other (non-probe) call site pca953xgpiosetmultiple() ensures the lock is held before calling pca953xwrite_regs().

The problem occurred when a request raced against irqbussync_unlock() approximately once per thousand reboots on an i.MX8MP based system.

  • Normal case

    0-0022: write register AI|3a {03,02,00,00,01} Input latch P0 0-0022: write register AI|49 {fc,fd,ff,ff,fe} Interrupt mask P0 0-0022: write register AI|08 {ff,00,00,00,00} Output P3 0-0022: write register AI|12 {fc,00,00,00,00} Config P3

  • Race case

    0-0022: write register AI|08 {ff,00,00,00,00} Output P3 0-0022: write register AI|08 {03,02,00,00,01} *** Wrong register *** 0-0022: write register AI|12 {fc,00,00,00,00} Config P3 0-0022: write register AI|49 {fc,fd,ff,ff,fe} Interrupt mask P0

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42253.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
44896beae605b93f2232301befccb7ef42953198
Fixed
58a5c93bd1a6e949267400080f07e57ffe05ec34
Fixed
e2ecdddca80dd845df42376e4b0197fe97018ba2
Fixed
de7cffa53149c7b48bd1bb29b02390c9f05b7f41
Fixed
bfc6444b57dc7186b6acc964705d7516cbaf3904

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42253.json"