Runtime State Vulnerability in Linux Kernel's IVPU Module

CVE-2024-54193

Summary

A vulnerability in the Linux kernel's IVPU (Intelligent Video Processing Unit) module can lead to improper runtime state management. Specifically, an issue has been identified when the function ivpu_ipc_send_receive_internal() is executed prior to successful initialization of the power management system. This mismanagement may cause warnings to occur if the last resume operation failed, potentially leading to unstable kernel behavior. The vulnerability highlights the importance of ensuring all components are initialized properly before their operations can be executed.

References