Threats tagged 'ghsa-qfhj-q535-jf9w'

CVE-2024-49985 is a medium-severity vulnerability in the Linux kernel's i2c stm32f7 driver. It involves a deadlock condition triggered during runtime suspend/resume when the clock controller attached to the I2C bus performs clock preparation operations. The deadlock occurs due to recursive locking of the prepare_lock mutex, which can cause the system to hang or become unresponsive. The issue arises because the clock controller's prepare callback triggers an I2C transfer that resumes the bus controller and attempts to reacquire the same mutex, leading to deadlock. The fix involves changing the clock enable/disable calls during runtime suspend/resume to avoid preparing/unpreparing the clock, preventing the deadlock.