Linux Kernel Cache Management Vulnerability in Clock Driver for RS9 PCIe

A vulnerability in the Linux kernel's clock driver for RS9 PCIe has been addressed. The issue arose from disabling cache management in a previous commit, which led to a kernel panic during the resume process. This panic occurred because the cache operations were unset, causing a failure in cache synchronization. The vulnerability has been resolved by re-enabling the cache and adjusting the register default settings to ensure proper functionality. The problem was particularly relevant for certain hardware-strapped registers that cannot be modified through software.

Impact

The vulnerability could lead to a kernel panic, causing a denial of service by crashing the system.

Reproduction

The vulnerability can be reproduced by applying the commit that disables cache management for the RS9 I2C accessors, without removing the necessary cache synchronization for the resume process. This will result in a kernel panic, as the cache operations will be unset, leading to a system crash.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel's official website.