Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's pinctrl Qualcomm MSM driver allows user-space to crash the kernel by sending invalid GPIO interrupt requests. This issue arises on some platforms where the UFS-reset pin, lacking interrupt logic, is incorrectly registered as a GPIO. The vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability can lead to a kernel crash, caused by an invalid GPIO interrupt request from user-space.
The vulnerability can be reproduced by using the 'gpiomon' command to monitor a GPIO pin that has been improperly configured to handle interrupts. This will trigger a BUG() in the pinctrl-msm driver, causing a kernel crash.
The vulnerability has been addressed in the official Linux Git repository. Users can upgrade to the latest version to apply the fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.