CVE-2024-49963

一、漏洞信息
 漏洞编号：[CVE-2024-49963](https://nvd.nist.gov/vuln/detail/CVE-2024-49963)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:mailbox: bcm2835: Fix timeout during suspend modeDuring noirq suspend phase the Raspberry Pi power driver suffer offirmware property timeouts. The reason is that the IRQ of the underlyingBCM2835 mailbox is disabled and rpi_firmware_property_list() will alwaysrun into a timeout [1].Since the VideoCore side isn t consider as a wakeup source, set theIRQF_NO_SUSPEND flag for the mailbox IRQ in order to keep it enabledduring suspend-resume cycle.[1]PM: late suspend of devices complete after 1.754 msecsWARNING: CPU: 0 PID: 438 at drivers/firmware/raspberrypi.c:128 rpi_firmware_property_list+0x204/0x22cFirmware transaction 0x00028001 timeoutModules linked in:CPU: 0 PID: 438 Comm: bash Tainted: G         C         6.9.3-dirty #17Hardware name: BCM2835Call trace:unwind_backtrace from show_stack+0x18/0x1cshow_stack from dump_stack_lvl+0x34/0x44dump_stack_lvl from __warn+0x88/0xec__warn from warn_slowpath_fmt+0x7c/0xb0warn_slowpath_fmt from rpi_firmware_property_list+0x204/0x22crpi_firmware_property_list from rpi_firmware_property+0x68/0x8crpi_firmware_property from rpi_firmware_set_power+0x54/0xc0rpi_firmware_set_power from _genpd_power_off+0xe4/0x148_genpd_power_off from genpd_sync_power_off+0x7c/0x11cgenpd_sync_power_off from genpd_finish_suspend+0xcc/0xe0genpd_finish_suspend from dpm_run_callback+0x78/0xd0dpm_run_callback from device_suspend_noirq+0xc0/0x238device_suspend_noirq from dpm_suspend_noirq+0xb0/0x168dpm_suspend_noirq from suspend_devices_and_enter+0x1b8/0x5acsuspend_devices_and_enter from pm_suspend+0x254/0x2e4pm_suspend from state_store+0xa8/0xd4state_store from kernfs_fop_write_iter+0x154/0x1a0kernfs_fop_write_iter from vfs_write+0x12c/0x184vfs_write from ksys_write+0x78/0xc0ksys_write from ret_fast_syscall+0x0/0x54Exception stack(0xcc93dfa8 to 0xcc93dff0)[...]PM: noirq suspend of devices complete after 3095.584 msecs
 漏洞公开时间：2024-10-22 02:15:17
 漏洞创建时间：2024-10-22 04:23:27
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-49963
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/4e1e03760ee7cc4779b6306867fe0fc02921b963 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b0de20de29b13950493a36bd4cf531200eb0e807 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-49963 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-49963 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-49963.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2320487 | https://bugzilla.suse.com/show_bug.cgi?id=1232147 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-49963 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2024-49963 |
| mageia |  | http://advisories.mageia.org/MGASA-2024-0345.html |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac |  | nvd |
|  |  | https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091 |  | nvd |
|  |  | https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251 |  | nvd |
|  |  | https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd |  | nvd |
|  |  | https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1 |  | nvd |
|  |  | https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114 |  | nvd |
|  |  | https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27 |  | nvd |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  Reserved.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP4(4.19.90):受影响
2.openEuler-22.03-LTS-SP3(5.10.0):受影响
3.openEuler-22.03-LTS-SP4(5.10.0):受影响
4.openEuler-24.03-LTS(6.6.0):受影响
5.master:不受影响
6.openEuler-24.03-LTS-Next(6.6.0):不受影响
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP1(5.10.0):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.master:否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-22.03-LTS-SP4(5.10.0):否
8.openEuler-24.03-LTS-SP1(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP3(5.10.0):正常修复
2.openEuler-22.03-LTS-SP4(5.10.0):正常修复
3.openEuler-24.03-LTS(6.6.0):正常修复
4.openEuler-20.03-LTS-SP4(4.19.90):不修复-超出修复范围
5.master:不受影响-漏洞代码不能被攻击者触发
6.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1078

src-openEuler/kernel

内容风险标识

评论 (19)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-49963

评论 (19)

搜索帮助

src-openEuler/kernel