Bug 1222083 (CVE-2023-52624) - VUL-0: CVE-2023-52624: kernel: drm/amd/display: Wake DMCUB before executing GPINT commands
Summary: VUL-0: CVE-2023-52624: kernel: drm/amd/display: Wake DMCUB before executing G...
Status: RESOLVED FIXED
Alias: CVE-2023-52624
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/399008/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-52624:5.5:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-03-27 15:59 UTC by SMASH SMASH
Modified: 2024-06-25 18:23 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-03-27 15:59:56 UTC
In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Wake DMCUB before executing GPINT commands

[Why]
DMCUB can be in idle when we attempt to interface with the HW through
the GPINT mailbox resulting in a system hang.

[How]
Add dc_wake_and_execute_gpint() to wrap the wake, execute, sleep
sequence.

If the GPINT executes successfully then DMCUB will be put back into
sleep after the optional response is returned.

It functions similar to the inbox command interface.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52624
https://www.cve.org/CVERecord?id=CVE-2023-52624
https://git.kernel.org/stable/c/2ef98c6d753a744e333b7e34b9cf687040fba57d
https://git.kernel.org/stable/c/e5ffd1263dd5b44929c676171802e7b6af483f21
https://bugzilla.redhat.com/show_bug.cgi?id=2271684
Comment 1 Andrea Mattiazzo 2024-03-27 16:13:23 UTC
Fixing commit (e5ffd1263dd5) found in:
 - ALP-current
 - SLE15-SP6
 - SLE15-SP6-GA
 - stable

Other branches doesn't contains the vulnerable functions.
Comment 4 Oscar Salvador 2024-04-17 03:28:28 UTC
@Patrik: Can you please have a look?

./scripts/check-kernel-fix CVE-2023-52624
e5ffd1263dd5 ("drm/amd/display: Wake DMCUB before executing GPINT commands") merged v6.8-rc1~111^2~1^2~84
Security fix for CVE-2023-52624 bsc#1222083 with CVSS 5.5
..............................
ACTION NEEDED!
SLE15-SP5: MANUAL: might need backport of e5ffd1263dd5b44929c676171802e7b6af483f21 ()
SLE12-SP5: MANUAL: might need backport of e5ffd1263dd5b44929c676171802e7b6af483f21 ()
SLE12-SP3-TD: MANUAL: might need backport of e5ffd1263dd5b44929c676171802e7b6af483f21 ()
Comment 5 Patrik Jakobsson 2024-04-17 07:22:49 UTC
(In reply to Andrea Mattiazzo from comment #1)
> Fixing commit (e5ffd1263dd5) found in:
>  - ALP-current
>  - SLE15-SP6
>  - SLE15-SP6-GA
>  - stable
> 
> Other branches doesn't contains the vulnerable functions.

There seems to be no need to wake up DMCUB prior to DCN35 so no further action required. Reassigning.