CVE-2024-43876

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()

Avoid large backtrace, it is sufficient to warn the user that there has

been a link problem. Either the link has failed and the system is in need

of maintenance, or the link continues to work and user has been informed.

The message from the warning can be looked up in the sources.

This makes an actual link issue less verbose.

First of all, this controller has a limitation in that the controller

driver has to assist the hardware with transition to L1 link state by

writing L1IATN to PMCTRL register, the L1 and L0 link state switching

is not fully automatic on this controller.

In case of an ASMedia ASM1062 PCIe SATA controller which does not support

ASPM, on entry to suspend or during platform pm_test, the SATA controller

enters D3hot state and the link enters L1 state. If the SATA controller

wakes up before rcar_pcie_wakeup() was called and ret

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References