Kernel Vulnerability in Linux RTC Affects System Time Management

CVE-2024-56739

Summary

A critical flaw exists in the Linux kernel regarding the Real-Time Clock (RTC) handling, specifically in the __rtc_read_time function. When the reading operation fails, the resultant rtc_time structure may contain uninitialized data or can return an illegal date/time from the RTC hardware. This mismanagement can lead to an extremely large time value being generated, which may adversely affect systems relying on periodic timers in the rtc->timerqueue. Continuous expiration of these timers could eventually result in kernel softlockups, disrupting the stability and performance of affected systems.

References