Bug 1224589 (CVE-2024-35942) - VUL-0: CVE-2024-35942: kernel: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
Summary: VUL-0: CVE-2024-35942: kernel: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdc...
Status: NEW
Alias: CVE-2024-35942
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/406632/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-35942:3.3:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-20 15:04 UTC by SMASH SMASH
Modified: 2024-07-11 12:51 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-05-20 15:04:51 UTC
In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain

According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of
hdmi rx verification IP that should not enable for HDMI TX.
But actually if the clock is disabled before HDMI/LCDIF probe,
LCDIF will not get pixel clock from HDMI PHY and print the error
logs:

[CRTC:39:crtc-2] vblank wait timed out
WARNING: CPU: 2 PID: 9 at drivers/gpu/drm/drm_atomic_helper.c:1634 drm_atomic_helper_wait_for_vblanks.part.0+0x23c/0x260

Add fdcc clock to LCDIF and HDMI TX power domains to fix the issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35942
https://www.cve.org/CVERecord?id=CVE-2024-35942
https://git.kernel.org/stable/c/697624ee8ad557ab5417f985d2c804241a7ad30d
https://git.kernel.org/stable/c/9d3f959b426635c4da50dfc7b1306afd84d23e7c
https://git.kernel.org/stable/c/b13c0d871cd878ff53d25507ca535f59ed1f6a2a
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35942.mbox
Comment 1 Joey Lee 2024-05-21 08:51:32 UTC
https://www.suse.com/security/cve/CVE-2024-35942.html
cvss 3.3
Comment 4 Takashi Iwai 2024-05-24 10:52:50 UTC
There is no corresponding code in SLE15-SP5 and earlier kernels.
Reassigned back.
Comment 7 Takashi Iwai 2024-07-11 12:51:02 UTC
The fix backported to SLE15-SP6 branch.