CVE-2024-46846

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 27, 2024
Updated: Oct 8, 2024

Summary

CVE-2024-46846: In the Linux kernel, a vulnerability related to unbalanced runtime PM (Power Management) and system PM (Power Management states managed by the kernel) handling in the spi (Serial Peripheral Interface) driver for Rockchip devices has been addressed. The issue, which was caused by a commit that stopped respecting runtime PM status and unconditionally disabled clocks upon system suspension, has been resolved by reverting back to using pm_runtime_force_{suspend,resume}(). Additionally, some error handling in the resume() function has been refactored due to concerns about re-disabling clocks on failure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share