CVE-2024-56723

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ). Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.04%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a	patch
https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482	patch
https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e	patch
https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c	patch
https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62	patch
https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8	patch
https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4	patch
https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4	patch

Frequently Asked Questions

What is the severity of CVE-2024-56723?: CVE-2024-56723 has been scored as a medium severity vulnerability.
How to fix CVE-2024-56723?: To fix CVE-2024-56723, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-56723 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-56723 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-56723?: CVE-2024-56723 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.