CVE-2024-50181

medium

Description

In the Linux kernel, the following vulnerability has been resolved: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D For i.MX7D DRAM related mux clock, the clock source change should ONLY be done done in low level asm code without accessing DRAM, and then calling clk API to sync the HW clock status with clk tree, it should never touch real clock source switch via clk API, so CLK_SET_PARENT_GATE flag should NOT be added, otherwise, DRAM's clock parent will be disabled when DRAM is active, and system will hang.

References

https://git.kernel.org/stable/c/d18dc8e14b9c794f58dae1577ccb2ab84a4a1b11

https://git.kernel.org/stable/c/b677b94a9193ec7b6607bd1255172ae59174a382

https://git.kernel.org/stable/c/a54c441b46a0745683c2eef5a359d22856d27323

https://git.kernel.org/stable/c/94f6cdc837e38371324cee97dfd2ef1a99a82c98

https://git.kernel.org/stable/c/339273a9ddfe7632b717c2e13e81cbd5d383e1ff

https://git.kernel.org/stable/c/11ceb17e6f07cc30410f3a6276cddda248a9b863

Details

Source: Mitre, NVD

Published: 2024-11-08

Updated: 2024-11-29

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium