CVE-2024-49874

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description The issue is related to a use-after-free vulnerability in the svc i3c master driver due to a race condition. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when the svc i3c master remove function is called, which frees the master->base resource, while the svc i3c master hj work and svc i3c master ibi work functions are still using it. The sequence of operations that may lead to a UAF bug involves the svc i3c master remove function being called on one CPU core while the svc i3c master hj work function is being executed on another CPU core.

Recommendations To resolve the issue, ensure that the work is canceled before proceeding with the cleanup in the svc i3c master remove function. As a temporary workaround, consider disabling the svc i3c master driver until a patch is available. Update to Linux kernel version 6.6.58 or later to fix the vulnerability.