mailbox: bcm2835: Fix timeout during suspend mode

{
  "id": "5b2399302138ea2170ff1c30949614cf96fc48f2aa66d857ce0aa2aadfb415e2",
  "url": "https://osv.dev/vulnerability/CVE-2024-49963",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "mailbox: bcm2835: Fix timeout during suspend mode",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is disabled and rpi_firmware_property_list() will always run into a timeout [1]. Since the VideoCore side isn't consider as a wakeup source, set the IRQF_NO_SUSPEND flag for the mailbox IRQ in order to keep it enabled during suspend-resume cycle. [1] PM: late suspend of devices complete after 1.754 msecs WARNING: CPU: 0 PID: 438 at drivers/firmware/raspberrypi.c:128 rpi_firmware_property_list+0x204/0x22c Firmware transaction 0x00028001 timeout Modules linked in: CPU: 0 PID: 438 Comm: bash Tainted: G C 6.9.3-dirty #17 Hardware name: BCM2835 Call trace: unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x34/0x44 dump_stack_lvl from __warn+0x88/0xec __warn from warn_slowpath_fmt+0x7c/0xb0 warn_slowpath_fmt from rpi_firmware_property_list+0x204/0x22c rpi_firmware_property_list from rpi_firmware_property+0x68/0x8c rpi_firmware_property from rpi_firmware_set_power+0x54/0xc0 rpi_firmware_set_power from _genpd_power_off+0xe4/0x148 _genpd_power_off from genpd_sync_power_off+0x7c/0x11c genpd_sync_power_off from genpd_finish_suspend+0xcc/0xe0 genpd_finish_suspend from dpm_run_callback+0x78/0xd0 dpm_run_callback from device_suspend_noirq+0xc0/0x238 device_suspend_noirq from dpm_suspend_noirq+0xb",
    "evidence": "osv:CVE-2024-49963",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.19.323",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.4.285",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.227",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.168",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.113",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.55",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.10.14",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.11.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-49963",
      "aliases": [
        "CVE-2024-49963"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0bae6af6d704f026d4938739786e0a69d50177ca"
                },
                {
                  "fixed": "4e1e03760ee7cc4779b6306867fe0fc02921b963"
                },
                {
                  "fixed": "b0de20de29b13950493a36bd4cf531200eb0e807"
                },
                {
                  "fixed": "32ee78823dea2d54adaf6e05f86622eba359e091"
                },
                {
                  "fixed": "df293ea78740a41384d648041f38f645700288e1"
                },
                {
                  "fixed": "90320cfc07b7d6e7a58fd8168f6380ec52ff0251"
                },
                {
                  "fixed": "10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac"
                },
                {
                  "fixed": "e65a9af05a0b59ebeba28e5e82265a233db7bc27"
                },
                {
                  "fixed": "dfeb67b2194ecc55ef8065468c5adda3cdf59114"
                },
                {
                  "fixed": "dc09f007caed3b2f6a3b6bd7e13777557ae22bfd"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49963.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.2.0"
                },
                {
                  "fixed": "4.19.323"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.20.0"
                },
                {
                  "fixed": "5.4.285"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.227"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.168"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.113"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.55"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.10.14"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.11.0"
                },
                {
                  "fixed": "6.11.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49963.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:44.122266511Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/10a58555e0bb5cc4673c8bb73b8afc5fa651f0ac",
        "https://git.kernel.org/stable/c/32ee78823dea2d54adaf6e05f86622eba359e091",
        "https://git.kernel.org/stable/c/4e1e03760ee7cc4779b6306867fe0fc02921b963",
        "https://git.kernel.org/stable/c/90320cfc07b7d6e7a58fd8168f6380ec52ff0251",
        "https://git.kernel.org/stable/c/b0de20de29b13950493a36bd4cf531200eb0e807",
        "https://git.kernel.org/stable/c/dc09f007caed3b2f6a3b6bd7e13777557ae22bfd",
        "https://git.kernel.org/stable/c/df293ea78740a41384d648041f38f645700288e1",
        "https://git.kernel.org/stable/c/dfeb67b2194ecc55ef8065468c5adda3cdf59114",
        "https://git.kernel.org/stable/c/e65a9af05a0b59ebeba28e5e82265a233db7bc27",
        "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49963.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-49963",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49963.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-49963",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 511652,
  "published_at": "2024-10-21T18:02:15.091+00:00"
}