{"timestamp":"2024-09-29T15:02:49.399006Z","id":"CVE-2024-46706","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/tty/serial/fsl_lpuart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"43543e6f539b3e646348c253059f75e27d63c94d","lessThan":"8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68","versionType":"git","status":"affected"},{"version":"43543e6f539b3e646348c253059f75e27d63c94d","lessThan":"3ecf625d4acb71d726bc0b49403cf68388b3d58d","versionType":"git","status":"affected"},{"version":"43543e6f539b3e646348c253059f75e27d63c94d","lessThan":"dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/tty/serial/fsl_lpuart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.2","status":"affected"},{"version":"0","lessThan":"6.2","versionType":"semver","status":"unaffected"},{"version":"6.6.48","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.10.7","lessThanOrEqual":"6.10.*","versionType":"semver","status":"unaffected"},{"version":"6.11","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.48
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.7
     *cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*

https://git.kernel.org/stable/c/3ecf625d4acb71d726bc0b49403cf68388b3d58d No Types Assigned

https://git.kernel.org/stable/c/3ecf625d4acb71d726bc0b49403cf68388b3d58d Patch

https://git.kernel.org/stable/c/8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68 No Types Assigned

https://git.kernel.org/stable/c/8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68 Patch

https://git.kernel.org/stable/c/dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c No Types Assigned

https://git.kernel.org/stable/c/dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c Patch

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: fsl_lpuart: mark last busy before uart_add_one_port

With "earlycon initcall_debug=1 loglevel=8" in bootargs, kernel
sometimes boot hang. It is because normal console still is not ready,
but runtime suspend is called, so early console putchar will hang
in waiting TRDE set in UARTSTAT.

The lpuart driver has auto suspend delay set to 3000ms, but during
uart_add_one_port, a child device serial ctrl will added and probed with
its pm runtime enabled(see serial_ctrl.c).
The runtime suspend call path is:
device_add
     |-> bus_probe_device
           |->device_initial_probe
	           |->__device_attach
                         |-> pm_runtime_get_sync(dev->parent);
			 |-> pm_request_idle(dev);
			 |-> pm_runtime_put(dev->parent);

So in the end, before normal console ready, the lpuart get runtime
suspended. And earlycon putchar will hang.

To address the issue, mark last busy just after pm_runtime_enable,
three seconds is long enough to switch from bootconsole to normal
console.

kernel.org https://git.kernel.org/stable/c/3ecf625d4acb71d726bc0b49403cf68388b3d58d [No types assigned]

kernel.org https://git.kernel.org/stable/c/8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68 [No types assigned]

kernel.org https://git.kernel.org/stable/c/dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c [No types assigned]