CVE-2024-53134

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65

Description A vulnerability in the Linux kernel has been resolved, specifically in the pmdomain: imx93-blk-ctrl module. The issue was caused by an incorrect check condition, which should be 'i < bc->onecell data.num domains' instead of 'bc->onecell data.num domains'. This mistake could lead to a kernel panic. Additionally, the runtime was disabled to address the "imx93-blk-ctrl 4ac10000.system-controller: Unbalanced pm runtime enable!" issue.

Recommendations For Linux kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue. As a temporary workaround, consider disabling the pm runtime enable function until a patch is available. Restrict access to the imx93-blk-ctrl module to minimize the risk of exploitation. Avoid using the onecell data.num domains variable in the affected code path until the issue is resolved.