CVE - CVE-2024-27412

CVE-ID
CVE-2024-27412	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx-i2c: Do not free non existing IRQ The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/083686474e7c97b0f8b66df37fcb64e432e8b771 URL:https://git.kernel.org/stable/c/083686474e7c97b0f8b66df37fcb64e432e8b771 MISC:https://git.kernel.org/stable/c/2df70149e73e79783bcbc7db4fa51ecef0e2022c URL:https://git.kernel.org/stable/c/2df70149e73e79783bcbc7db4fa51ecef0e2022c MISC:https://git.kernel.org/stable/c/7394abc8926adee6a817bab10797e0adc898af77 URL:https://git.kernel.org/stable/c/7394abc8926adee6a817bab10797e0adc898af77 MISC:https://git.kernel.org/stable/c/cefe18e9ec84f8fe3e198ccebb815cc996eb9797 URL:https://git.kernel.org/stable/c/cefe18e9ec84f8fe3e198ccebb815cc996eb9797 MISC:https://git.kernel.org/stable/c/d4d813c0a14d6bf52d810a55db06a2e7e3d98eaa URL:https://git.kernel.org/stable/c/d4d813c0a14d6bf52d810a55db06a2e7e3d98eaa MISC:https://git.kernel.org/stable/c/d7acc4a569f5f4513120c85ea2b9f04909b7490f URL:https://git.kernel.org/stable/c/d7acc4a569f5f4513120c85ea2b9f04909b7490f MISC:https://git.kernel.org/stable/c/e601ae81910ce6a3797876e190a2d8ef6cf828bc URL:https://git.kernel.org/stable/c/e601ae81910ce6a3797876e190a2d8ef6cf828bc MISC:https://git.kernel.org/stable/c/fbca8bae1ba79d443a58781b45e92a73a24ac8f8 URL:https://git.kernel.org/stable/c/fbca8bae1ba79d443a58781b45e92a73a24ac8f8 MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3842-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html MLIST:[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Assigning CNA
kernel.org
Date Record Created
20240225	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240225)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)