CVE-2024-50093

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

thermal: intel: int340x: processor: Fix warning during module unload

The processor_thermal driver uses pcim_device_enable() to enable a PCI

device, which means the device will be automatically disabled on driver

detach. Thus there is no need to call pci_disable_device() again on it.

With recent PCI device resource management improvements, e.g. commit

f748a07a0b64 ("PCI: Remove legacy pcim_release()"), this problem is

exposed and triggers the warining below.

[ 224.010735] proc_thermal_pci 0000:00:04.0: disabling already-disabled device

[ 224.010747] WARNING: CPU: 8 PID: 4442 at drivers/pci/pci.c:2250 pci_disable_device+0xe5/0x100

...

[ 224.010844] Call Trace:

[ 224.010845] <TASK>

[ 224.010847] ? show_regs+0x6d/0x80

[ 224.010851] ? __warn+0x8c/0x140

[ 224.010854] ? pci_disable_device+0xe5/0x100

[ 224.010856] ? report_bug+0x1c9/0x1e0

[ 224.010859] ? handle_bug+0x46/0x80

[ 224.010862] ? exc

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References