CVE-2023-52660: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52660 is a vulnerability discovered in the Linux kernel's rkisp1 media driver. The issue was first published on May 17, 2024, and involves improper IRQ handling due to shared interrupts. The vulnerability affects Linux systems utilizing the rkisp1 driver for image signal processing (NVD).

The vulnerability stems from the driver's request for interrupts as IRQF_SHARED, allowing interrupt handlers to be called at any time. When such a call occurs while the ISP (Image Signal Processor) is powered down, the SoC (System on Chip) will hang as the driver attempts to access the ISP registers. This issue can be reproduced even without the platform sharing the IRQ line by enabling CONFIG_DEBUG_SHIRQ and unloading the driver (NVD).

When exploited, this vulnerability causes the system to hang, potentially leading to system instability and denial of service conditions. The impact occurs specifically when the ISP is powered down while the driver attempts to access ISP registers (NVD).

The vulnerability can be triggered by normal system operations, particularly during driver unloading or power state transitions. It can be reproduced reliably using the CONFIG_DEBUG_SHIRQ configuration option (NVD).

The issue has been resolved by adding a new field called 'irqs_enabled' which is used to prevent the interrupt handler from executing when the ISP is not operational. This fix has been implemented in the Linux kernel (NVD).