CVE-2024-56671

Summary

CVE-2024-56667 exposes a vulnerability in the Linux kernel's gpio driver for GraniteRapids hardware, specifically the vGPIO driver. The issue stems from an unauthorized modification of the irq_chip.name field during probe function execution, which occurs due to the suboptimal implementation of gpio_irq_chip_set_chip(). This misstep casts away the const qualifier, leading to a crash during bootup. The vulnerability can result in a permissions violation and system instability, as indicated in the provided crash log. The issue has been resolved by moving the setting of irq_chip.name to the initialization of the "irq_chip" struct to prevent unauthorized modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.