CVE-2024-56781

Source
https://cve.org/CVERecord?id=CVE-2024-56781
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56781.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56781
Downstream
Related
Published
2025-01-08T17:51:57.856Z
Modified
2026-03-12T03:46:56.229253Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
powerpc/prom_init: Fixup missing powermac #size-cells
Details

In the Linux kernel, the following vulnerability has been resolved:

powerpc/prom_init: Fixup missing powermac #size-cells

On some powermacs escc nodes are missing #size-cells properties, which is deprecated and now triggers a warning at boot since commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling").

For example:

Missing '#size-cells' in /pci@f2000000/mac-io@c/escc@13000 WARNING: CPU: 0 PID: 0 at drivers/of/base.c:133 ofbusnsizecells+0x98/0x108 Hardware name: PowerMac3,1 7400 0xc0209 PowerMac ... Call Trace: ofbusnsizecells+0x98/0x108 (unreliable) ofbusdefaultcountcells+0x40/0x60 __ofgetaddress+0xc8/0x21c __ofaddresstoresource+0x5c/0x228 pmzinitport+0x5c/0x2ec pmzprobe.isra.0+0x144/0x1e4 pmzconsoleinit+0x10/0x48 consoleinit+0xcc/0x138 startkernel+0x5c4/0x694

As powermacs boot via prom_init it's possible to add the missing properties to the device tree during boot, avoiding the warning. Note that escc-legacy nodes are also missing #size-cells properties, but they are skipped by the macio driver, so leave them alone.

Depends-on: 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling")

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56781.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
0b94d838018fb0a824e0cd3149034928c99fb1b7
Fixed
a79a7e3c03ae2a07f68b5f24d5ed549f9799ec89
Fixed
ee68554d2c03e32077f7b984e5289fdb005036d2
Fixed
6d5f0453a2228607333bff0c85238a3cb495d194
Fixed
691284c2cd33ffaa0b35ce53b3286b90621e9dc9
Fixed
296a109fa77110ba5267fe0e90a26005eecc2726
Fixed
cf89c9434af122f28a3552e6f9cc5158c33ce50a

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56781.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.287
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.231
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.174
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.120
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.66
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56781.json"