CVE-2023-53392

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

HID: intel-ish-hid: Fix kernel panic during warm reset

During warm reset device->fw_client is set to NULL. If a bus driver is

registered after this NULL setting and before new firmware clients are

enumerated by ISHTP, kernel panic will result in the function

ishtp_cl_bus_match(). This is because of reference to

device->fw_client->props.protocol_name.

ISH firmware after getting successfully loaded, sends a warm reset

notification to remove all clients from the bus and sets

device->fw_client to NULL. Until kernel v5.15, all enabled ISHTP kernel

module drivers were loaded right after any of the first ISHTP device was

registered, regardless of whether it was a matched or an unmatched

device. This resulted in all drivers getting registered much before the

warm reset notification from ISH.

Starting kernel v5.16, this issue got exposed after the change was

introduced to load only bus drivers for the respective matching de

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References