CVE-2024-53157 in Linux
요약
\~에 의해 VulDB • 2026. 05. 30.
리눅스 커널에서 다음 취약점이 해결되었습니다:
firmware: arm_scpi: 펌웨어가 반환하는 DVFS OPP 카운트 확인
SCPI 펌웨어가 OPP 카운트를 0으로 반환할 때 아래 호출 추적(call trace)과 함께 커널 크래시가 발생하는 버그를 수정합니다.
일부 플랫폼에서 재부팅 테스트 중 dvfs_info.opp_count가 0이 될 수 있으며, 커널은 kcalloc(info->count, sizeof(*opp), GFP_KERNEL)에 대한 포인터를 역참조한 후 크래시가 발생합니다.
| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 | Mem abort info: | ESR = 0x96000004 | Exception class = DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | Data abort info: | ISV = 0, ISS = 0x00000004 | CM = 0, WnR = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c | [0000000000000028] pgd=0000000000000000
| Internal error: Oops: 96000004 [#1] SMP
| scpi-hwmon: probe of PHYT000D:00 failed with error -110 | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c) | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1 | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS | pstate: 60000005 (nZCv daif -PAN -UAO) | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]
| lr : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]
| sp : ffff000009933b40 | x29: ffff000009933b40 x28: 0000000000000000 | x27: 0000000000000000 x26: 0000000000000000 | x25: 0000000000000000 x24: 0000000000000000 | x23: 0000000000000000 x22: 0000000000000000 | x21: 0000000000000000 x20: 0000000000000000 | x19: 0000000000000000 x18: 0000000000000000 | x17: 0000000000000000 x16: 0000000000000000
Once again VulDB remains the best source for vulnerability data.