CVE - CVE-2024-49963

CVE-ID
CVE-2024-49963	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is disabled and rpi_firmware_property_list() will always run into a timeout [1]. Since the VideoCore side isn't consider as a wakeup source, set the IRQF_NO_SUSPEND flag for the mailbox IRQ in order to keep it enabled during suspend-resume cycle. [1] PM: late suspend of devices complete after 1.754 msecs WARNING: CPU: 0 PID: 438 at drivers/firmware/raspberrypi.c:128 rpi_firmware_property_list+0x204/0x22c Firmware transaction 0x00028001 timeout Modules linked in: CPU: 0 PID: 438 Comm: bash Tainted: G C 6.9.3-dirty #17 Hardware name: BCM2835 Call trace: unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x34/0x44 dump_stack_lvl from __warn+0x88/0xec __warn from warn_slowpath_fmt+0x7c/0xb0 warn_slowpath_fmt from rpi_firmware_property_list+0x204/0x22c rpi_firmware_property_list from rpi_firmware_property+0x68/0x8c rpi_firmware_property from rpi_firmware_set_power+0x54/0xc0 rpi_firmware_set_power from _genpd_power_off+0xe4/0x148 _genpd_power_off from genpd_sync_power_off+0x7c/0x11c genpd_sync_power_off from genpd_finish_suspend+0xcc/0xe0 genpd_finish_suspend from dpm_run_callback+0x78/0xd0 dpm_run_callback from device_suspend_noirq+0xc0/0x238 device_suspend_noirq from dpm_suspend_noirq+0xb0/0x168 dpm_suspend_noirq from suspend_devices_and_enter+0x1b8/0x5ac suspend_devices_and_enter from pm_suspend+0x254/0x2e4 pm_suspend from state_store+0xa8/0xd4 state_store from kernfs_fop_write_iter+0x154/0x1a0 kernfs_fop_write_iter from vfs_write+0x12c/0x184 vfs_write from ksys_write+0x78/0xc0 ksys_write from ret_fast_syscall+0x0/0x54 Exception stack(0xcc93dfa8 to 0xcc93dff0) [...] PM: noirq suspend of devices complete after 3095.584 msecs
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac URL:https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac MISC:https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091 URL:https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091 MISC:https://git.kernel.org/stable/c/4e1e03760ee7cc4779b6306867fe0fc02921b963 URL:https://git.kernel.org/stable/c/4e1e03760ee7cc4779b6306867fe0fc02921b963 MISC:https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251 URL:https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251 MISC:https://git.kernel.org/stable/c/b0de20de29b13950493a36bd4cf531200eb0e807 URL:https://git.kernel.org/stable/c/b0de20de29b13950493a36bd4cf531200eb0e807 MISC:https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd URL:https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd MISC:https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1 URL:https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1 MISC:https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114 URL:https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114 MISC:https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27 URL:https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)