Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability related to improper clock management has been identified in the Linux kernel's IOMMU implementation for Mediatek platforms. After a recent commit, the IOMMU clock is now managed by runtime callbacks, but the removal process still attempted to disable the clock manually. This discrepancy can lead to warnings about the IOMMU being already disabled, indicating a potential issue with the driver's handling of clock states.
The vulnerability can cause runtime warnings about improper clock management, which may indicate deeper issues with the driver's functionality or resource management.
The vulnerability can be reproduced by unbinding the IOMMU driver from a device using the sysfs interface. This action will trigger a warning if the driver improperly attempts to disable a clock that is already off, highlighting the mismanagement of clock states.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.