In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()<\/p>\n
gdsc_unregister() removes the OF provider entry and tears down the
\nparent\/subdomain wiring, but never calls pm_genpd_remove() on the
\nindividual generic_pm_domain structures registered by gdsc_init():<\/p>\n
\tvoid gdsc_unregister(struct gdsc_desc *desc)
\n\t{
\n\t\tstruct device *dev = desc->dev;
\n\t\tsize_t num = desc->num;<\/p>\n
\t\tgdsc_pm_subdomain_remove(desc, num);
\n\t\tof_genpd_del_provider(dev->of_node);
\n\t}<\/p>\n
That leaves dangling entries on the global gpd_list. After a provider
\nunbind\/rebind cycle (deferred-probe replay during early boot, real
\nmodule unload of a clk driver that owns GDSCs, or an OF-overlay tear-
\ndown) the next gdsc_init() will end up trying to re-register a name
\nthat is still in the list and pm_genpd_init() returns -EEXIST.<\/p>\n
While we are here, flip the order so the consumer-facing OF provider
\nentry is the first thing removed — otherwise a fresh
\nof_genpd_get_from_provider() call racing with the teardown could
\nattach to a domain that is mid-removal.<\/p>\n
Iterate the scs[] array and pm_genpd_remove() each registered domain
\nafter the subdomain links are torn down. The regulators stay devm-
\nmanaged (devm_regulator_get_optional() in gdsc_register()), so the
\nrelease happens automatically when the underlying device is unbound;
\njust the genpd accounting needs to be undone explicitly.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()<\/p>\n
gdsc_unregister() removes the OF provider entry and tears down t<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-26002","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/26002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}