CVE-2024-49961

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: ar0521: Use cansleep version of gpiod_set_value()

If we use GPIO reset from I2C port expander, we must use *_cansleep()

variant of GPIO functions.

This was not done in ar0521_power_on()/ar0521_power_off() functions.

Let's fix that.

------------[ cut here ]------------

WARNING: CPU: 0 PID: 11 at drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x74/0x7c

Modules linked in:

CPU: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.10.0 #53

Hardware name: Diasom DS-RK3568-SOM-EVB (DT)

Workqueue: events_unbound deferred_probe_work_func

pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : gpiod_set_value+0x74/0x7c

lr : ar0521_power_on+0xcc/0x290

sp : ffffff8001d7ab70

x29: ffffff8001d7ab70 x28: ffffff80027dcc90 x27: ffffff8003c82000

x26: ffffff8003ca9250 x25: ffffffc080a39c60 x24: ffffff8003ca9088

x23: ffffff8002402720 x22: ffffff8003ca9080 x21: ffffff8003ca9088

x20: 0000000000000000 x19: ffffff8001eb2a00 x18

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References