CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's hwmon subsystem, specifically the lm90 driver, where the lack of proper locking in the lm90_alert function can lead to race conditions during concurrent operations. This can result in the unintended re-enabling of the hardware alert line while an alarm is still active, potentially causing an interrupt storm that disrupts system stability. Organizations using affected Linux kernel versions, particularly those relying on the lm90 driver for hardware monitoring, should prioritize applying the fix to mitigate these risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: lm90_alert() executes in the smbus alert context and calls lm90_update_confreg() to disable the hardware alert line, without acquiring hwmon_lock. Concurrently, sysfs write operations (such as lm90_write_convrate) hold the hwmon_lock, temporarily modify data->config, and then restore it. If an alert interrupt occurs concurrently with a sysfs write, the sysfs path will overwrite the alert handler's modifications to data->config and the hardware register. This unintentionally re-enables the hardware alert line while the alarm is still active, causing an interrupt storm. Add the missing lock to lm90_alert() to solve the problem.
Related CVEs
Other vulnerabilities affecting the same vendor(s)