CVE-2024-53134

A flaw was found in the Linux kernel's i.MX93 power domain driver. An improper loop condition in the device removal routine prevents the loop from terminating. A local attacker could exploit this flaw during device unbinding or removal to trigger a kernel panic, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the imx93_blk_ctrl kernel module from loading by adding a configuration file in /etc/modprobe.d/:

1. Blacklist the module:

echo "install imx93_blk_ctrl /bin/true" >> /etc/modprobe.d/disable-imx93_blk_ctrl.conf

2. A system reboot is required to ensure the module is not active without executing the vulnerable teardown path:

reboot

Caveats: Disabling this module will disable power domain management on NXP i.MX93 hardware platforms, preventing dependent on-chip peripherals from operating properly. Systems not utilizing NXP i.MX93 hardware are unaffected and do not require this module.