CVE-2023-52882

clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change

Description

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to system crashes and other undefined behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.

N/A

CVSS

Severity:

EPSS 0.36%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66
https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175
https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019
https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069
https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a
https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90
https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
https://security.netapp.com/advisory/ntap-20240912-0010/

Frequently Asked Questions

What is the severity of CVE-2023-52882?: CVE-2023-52882 has not yet been assigned a CVSS score.
How to fix CVE-2023-52882?: To fix CVE-2023-52882, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-52882 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-52882 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-52882?: CVE-2023-52882 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.