CVE-2024-56691

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ). Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.

N/A

CVSS

Severity:

EPSS 0.09%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/0997e77c51330c2866a4f39480e762cca92ad953
https://git.kernel.org/stable/c/0b648968bfa4f5c9c4983bca9f2de17626ed6fb6
https://git.kernel.org/stable/c/23230ac3c5ca3f154b64849d1cf50583b4e6b98c
https://git.kernel.org/stable/c/c310e6916c0b297011d0fec03f168a6b24e9e984
https://git.kernel.org/stable/c/e1ef62e8d262e3f27446d26742208c1c81e9ee18
https://git.kernel.org/stable/c/518e414d24e7037d6cc7198e942bf47fe6f5e8e1
https://git.kernel.org/stable/c/87a07a5b0b296e489c606ca95ffc16c18821975b
https://git.kernel.org/stable/c/686fb77712a4bc94b76a0c5ae74c60118b7a0d79

Frequently Asked Questions

What is the severity of CVE-2024-56691?: CVE-2024-56691 has not yet been assigned a CVSS score.
How to fix CVE-2024-56691?: To fix CVE-2024-56691, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-56691 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-56691 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-56691?: CVE-2024-56691 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.