CVE-2024-56576

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: tc358743: Fix crash in the probe error path when using polling

If an error occurs in the probe() function, we should remove the polling

timer that was alarmed earlier, otherwise the timer is called with

arguments that are already freed, which results in a crash.

------------[ cut here ]------------

WARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268

Modules linked in:

CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226

Hardware name: Diasom DS-RK3568-SOM-EVB (DT)

pstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : __run_timers+0x244/0x268

lr : __run_timers+0x1d4/0x268

sp : ffffff80eff2baf0

x29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00

x26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00

x23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000

x20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff

x17: f

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References