CVE-2024-56671: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-56671 is a vulnerability in the Linux kernel's Granite Rapids vGPIO driver that was discovered and resolved in December 2024. The issue affects Linux kernel versions from 6.10 up to (excluding) 6.12.6, as well as specific release candidates 6.13-rc1 and 6.13-rc2. The vulnerability stems from an unauthorized modification of the irq_chip.name field where the irq_chip struct was initialized as const (NVD).

The vulnerability occurs due to a suboptimal implementation of gpio_irq_chip_set_chip() function, which incorrectly handles const qualifiers. The issue manifests as a crash during bootup when attempting to modify the irq_chip.name field. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability causes a kernel crash during system bootup, resulting in a page fault error. The crash occurs with supervisor write access in kernel mode, leading to a permissions violation. This primarily affects system availability and stability (Kernel Patch).

The vulnerability requires local access with low privileges to be exploited. It does not require user interaction and has low attack complexity, as indicated by the CVSS metrics (NVD).

The vulnerability has been patched by moving the setting of irq_chip.name from the probe() function to the initialization of the irq_chip struct. The fix is implemented in the Linux kernel through a patch that properly handles the const qualifier in the gpio_irq_chip_set_chip() implementation (Kernel Patch).