CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

[Greg Kroah-Hartman]

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

For i.MX7D DRAM related mux clock, the clock source change should ONLY
be done done in low level asm code without accessing DRAM, and then
calling clk API to sync the HW clock status with clk tree, it should never
touch real clock source switch via clk API, so CLK_SET_PARENT_GATE flag
should NOT be added, otherwise, DRAM's clock parent will be disabled when
DRAM is active, and system will hang.

The Linux kernel CVE team has assigned CVE-2024-50181 to this issue.


Affected and fixed versions
===========================

	Fixed in 5.10.227 with commit b677b94a9193
	Fixed in 5.15.168 with commit d18dc8e14b9c
	Fixed in 6.1.113 with commit 11ceb17e6f07
	Fixed in 6.6.57 with commit 339273a9ddfe
	Fixed in 6.11.4 with commit 94f6cdc837e3
	Fixed in 6.12-rc1 with commit a54c441b46a0

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2024-50181
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/clk/imx/clk-imx7d.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/b677b94a9193ec7b6607bd1255172ae59174a382
	https://git.kernel.org/stable/c/d18dc8e14b9c794f58dae1577ccb2ab84a4a1b11
	https://git.kernel.org/stable/c/11ceb17e6f07cc30410f3a6276cddda248a9b863
	https://git.kernel.org/stable/c/339273a9ddfe7632b717c2e13e81cbd5d383e1ff
	https://git.kernel.org/stable/c/94f6cdc837e38371324cee97dfd2ef1a99a82c98
	https://git.kernel.org/stable/c/a54c441b46a0745683c2eef5a359d22856d27323

CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

[Ben Hutchings]

[-- Attachment #1: Type: text/plain, Size: 504 bytes --]

Hi all,

CVE-2024-50181 is supposed to be fixed by commit a54c441b46a0 "clk: imx:
Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D" but I think this
assignment should be rejected.

Based on
<https://lore.kernel.org/all/DU0PR04MB9417404E8E89CB82386146B6881E2@DU0PR04MB9417.eurprd04.prod.outlook.com/>
it doesn't seem like there was a real issue to be fixed in the upstream
kernel.

Ben.

-- 
Ben Hutchings
Any smoothly functioning technology is indistinguishable
from a rigged demo.


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

[Greg KH]

On Sun, Mar 02, 2025 at 06:55:52PM +0100, Ben Hutchings wrote:
> Hi all,
> 
> CVE-2024-50181 is supposed to be fixed by commit a54c441b46a0 "clk: imx:
> Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D" but I think this
> assignment should be rejected.
> 
> Based on
> <https://lore.kernel.org/all/DU0PR04MB9417404E8E89CB82386146B6881E2@DU0PR04MB9417.eurprd04.prod.outlook.com/>
> it doesn't seem like there was a real issue to be fixed in the upstream
> kernel.

Now rejected, thanks.

greg k-h