CVE-2024-56671: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-56671 is a vulnerability in the Linux kernel's Granite Rapids vGPIO driver that was discovered and resolved in December 2024. The issue affects Linux kernel versions from 6.10 up to (excluding) 6.12.6, as well as specific release candidates 6.13-rc1 and 6.13-rc2. The vulnerability stems from an unauthorized modification of the irqchip.name field where the irqchip struct was initialized as const (NVD).

The vulnerability occurs due to a suboptimal implementation of gpioirqchipsetchip() function, which incorrectly handles const qualifiers. The issue manifests as a crash during bootup when attempting to modify the irq_chip.name field. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability causes a kernel crash during system bootup, resulting in a page fault error. The crash occurs with supervisor write access in kernel mode, leading to a permissions violation. This primarily affects system availability and stability (Kernel Patch).

The vulnerability has been patched by moving the setting of irqchip.name from the probe() function to the initialization of the irqchip struct. The fix is implemented in the Linux kernel through a patch that properly handles the const qualifier in the gpioirqchipsetchip() implementation (Kernel Patch).