CVE-2023-52660
published 2024-05-17CVE-2023-52660: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the interrupts as IRQF_SHARED, so the interrupt
handlers can be called at any time. If such a call happens while the ISP
is powered down, the SoC will hang as the driver tries to access the
ISP registers.
This can be reproduced even without the platform sharing the IRQ line:
Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will
hang.
Fix this by adding a new field, 'irqs_enabled', which is used to bail
out from the interrupt handler when the ISP is not operational.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.85-1 (bookworm) | linux 6.1.85-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 25cb42af9ffabffec499e9e69e2fd3797774ce5b < abd34206f396d3ae50cddbd5aa840b8cd7f68c63 | abd34206f396d3ae50cddbd5aa840b8cd7f68c63 |
| linux | linux | >= 25cb42af9ffabffec499e9e69e2fd3797774ce5b < b39b4d207d4f236a74e20d291f6356f2231fd9ee | b39b4d207d4f236a74e20d291f6356f2231fd9ee |
| linux | linux | >= 25cb42af9ffabffec499e9e69e2fd3797774ce5b < edcf92bc66d8361c51dff953a55210e5cfd95587 | edcf92bc66d8361c51dff953a55210e5cfd95587 |
| linux | linux | >= 25cb42af9ffabffec499e9e69e2fd3797774ce5b < ffb635bb398fc07cb38f8a7b4a82cbe5f412f08e | ffb635bb398fc07cb38f8a7b4a82cbe5f412f08e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.85-1 | 6.1.85-1 |
| linux | linux_kernel | >= 0 < 6.7.12-1 | 6.7.12-1 |
| linux | linux_kernel | >= 0 < 6.7.12-1 | 6.7.12-1 |
| linux | linux_kernel | >= 5.6 < 6.1.83 | 6.1.83 |
| linux | linux_kernel | >= 6.2 < 6.6.23 | 6.6.23 |
| linux | linux_kernel | >= 6.7 < 6.7.11 | 6.7.11 |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: rkisp1: Fix IRQ handling due to shared interrupts
vendor_redhat·2024-05-17·CVSS 5.5
CVE-2023-52660 [MEDIUM] kernel: media: rkisp1: Fix IRQ handling due to shared interrupts
kernel: media: rkisp1: Fix IRQ handling due to shared interrupts
In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the interrupts as IRQF_SHARED, so the interrupt
handlers can be called at any time. If such a call happens while the ISP
is powered down, the SoC will hang as the driver tries to access the
ISP registers.
This can be reproduced even without the platform sharing the IRQ line:
Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will
hang.
Fix this by adding a new field, 'irqs_enabled', which is used to bail
out from the interrupt handler when the ISP is not operational.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7
Microsoft
media: rkisp1: Fix IRQ handling due to shared interrupts
vendor_msrc·2024-05-14·CVSS 5.5
CVE-2023-52660 [MEDIUM] media: rkisp1: Fix IRQ handling due to shared interrupts
media: rkisp1: Fix IRQ handling due to shared interrupts
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Debian
CVE-2023-52660: linux - In the Linux kernel, the following vulnerability has been resolved: media: rkis...
vendor_debian·2023·CVSS 5.5
CVE-2023-52660 [MEDIUM] CVE-2023-52660: linux - In the Linux kernel, the following vulnerability has been resolved: media: rkis...
In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQF_SHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will hang as the driver tries to access the ISP registers. This can be reproduced even without the platform sharing the IRQ line: Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will hang. Fix this by adding a new field, 'irqs_enabled', which is used to bail out from the interrupt handler when the ISP is not operational.
Scope: local
bookworm: resolved (fixed in 6.1.85-1)
bullseye: open
forky: resolved (fixed in 6.7.12-1)
sid: resolved (fixed in 6.7.12-1)
trixie: resolved (fixed in 6.7.12-
GHSA
GHSA-qpfh-8wq3-6fx5: In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the
ghsa_unreviewed·2024-05-17
CVE-2023-52660 [MEDIUM] GHSA-qpfh-8wq3-6fx5: In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the
In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the interrupts as IRQF_SHARED, so the interrupt
handlers can be called at any time. If such a call happens while the ISP
is powered down, the SoC will hang as the driver tries to access the
ISP registers.
This can be reproduced even without the platform sharing the IRQ line:
Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will
hang.
Fix this by adding a new field, 'irqs_enabled', which is used to bail
out from the interrupt handler when the ISP is not operational.
OSV
CVE-2023-52660: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the i
osv·2024-05-17·CVSS 5.5
CVE-2023-52660 [MEDIUM] CVE-2023-52660: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the i
In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQF_SHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will hang as the driver tries to access the ISP registers. This can be reproduced even without the platform sharing the IRQ line: Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will hang. Fix this by adding a new field, 'irqs_enabled', which is used to bail out from the interrupt handler when the ISP is not operational.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/abd34206f396d3ae50cddbd5aa840b8cd7f68c63https://git.kernel.org/stable/c/b39b4d207d4f236a74e20d291f6356f2231fd9eehttps://git.kernel.org/stable/c/edcf92bc66d8361c51dff953a55210e5cfd95587https://git.kernel.org/stable/c/ffb635bb398fc07cb38f8a7b4a82cbe5f412f08ehttps://git.kernel.org/stable/c/abd34206f396d3ae50cddbd5aa840b8cd7f68c63https://git.kernel.org/stable/c/b39b4d207d4f236a74e20d291f6356f2231fd9eehttps://git.kernel.org/stable/c/edcf92bc66d8361c51dff953a55210e5cfd95587https://git.kernel.org/stable/c/ffb635bb398fc07cb38f8a7b4a82cbe5f412f08e
2024-05-17
Published