Improper locking in Linux kernel rtc driver

1) Improper locking

EUVDB-ID: #VU102154

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56739

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the rtc_timer_do_work() function in drivers/rtc/interface.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.1 - 6.1.119

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc3:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc7:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.6:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/0d68e8514d9040108ff7d1b37ca71096674b6efe
https://git.kernel.org/stable/c/246f621d363988e7040f4546d20203dc713fa3e1
https://git.kernel.org/stable/c/39ad0a1ae17b54509cd9e93dcd8cec16e7c12d3f
https://git.kernel.org/stable/c/44b3257ff705d63d5f00ef8ed314a0eeb7ec37f2
https://git.kernel.org/stable/c/a1f0b4af90cc18b10261ecde56c6a56b22c75bd1
https://git.kernel.org/stable/c/dd4b1cbcc916fad5d10c2662b62def9f05e453d4
https://git.kernel.org/stable/c/e77bce0a8c3989b4173c36f4195122bca8f4a3e1
https://git.kernel.org/stable/c/e8ba8a2bc4f60a1065f23d6a0e7cbea945a0f40d
https://git.kernel.org/stable/c/fde56535505dde3336df438e949ef4742b6d6d6e
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.120

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.