Can you explain this vulnerability to me?

This vulnerability involves the Linux kernel's clock management system, specifically the pll1_d8 clock which is a parent clock for many others including those used by APB and AXI buses. The issue occurs because the pll1_d8 clock, enabled by the boot loader, could be disabled unintentionally when the system responds to a probe deferral (-EPROBE_DEFER) during reset controller requests. Disabling the CLK_DMA clock and its parents led to the pll1_d8 clock's enable count dropping to zero, causing it to be disabled and resulting in a system hang. The fix was to mark the pll1_d8 clock as critical to prevent it from being disabled.

Useful 0 Not Useful 0

How can this vulnerability impact me? :

This vulnerability can cause a system hang due to the unintended disabling of a critical clock (pll1_d8) in the Linux kernel. Since this clock is a parent to many others used by important buses (APB and AXI), its disablement can halt system operations, leading to potential downtime or system instability.

Useful 0 Not Useful 0

What immediate steps should I take to mitigate this vulnerability?

The vulnerability is resolved by marking the pll1_d8 clock as critical to prevent it from being disabled, which avoids system hangs. Immediate mitigation involves updating the Linux kernel to a version that includes this fix.

Useful 0 Not Useful 0