CVE-2023-52660

What it actually does

Interrupt handlers for the rkisp1 driver can execute while the ISP is powered down, causing attempted register accesses that hang the SoC due to shared IRQ registration without an enabled-state check.

Why it matters to the business

Affected Linux systems may experience sudden hangs or freezes during driver unload, power transitions, or normal interrupt activity on media hardware, leading to downtime and potential data loss on devices using the rkisp1 ISP.

How an attack unfolds

An attacker or automated process triggers a shared interrupt while the ISP is powered down; the handler proceeds to access ISP registers without checking operational state, resulting in a system hang. No sophisticated remote code execution is involved; the issue manifests as denial of service.

How to fix it

Update the Linux kernel to a version containing commit abd34206f396d3ae50cddbd5aa840b8cd7f68c63 or later stable releases that add the irqs_enabled guard in the rkisp1 interrupt handler.

How to confirm the fix worked

Verify the presence of the irqs_enabled field and conditional bail-out logic in the rkisp1 IRQ handler source; confirm the driver unloads cleanly with CONFIG_DEBUG_SHIRQ enabled without causing a hang.

Typical attack path

1. Load the rkisp1 driver on supported hardware
2. Power down the ISP or unload the driver
3. Cause a shared IRQ to fire (via CONFIG_DEBUG_SHIRQ or platform activity)
4. Handler executes and accesses ISP registers while powered down
5. SoC hangs with no recovery

How to detect it

Search kernel logs and crash dumps for rkisp1-related register access faults or hangs triggered during driver unload or power-down sequences; correlate with shared IRQ activity on affected platforms.

What your security team should do

• Apply the referenced kernel commit or newer stable branch immediately on all affected systems
• Test driver unload and power-management paths in staging environments before production rollout
• Monitor for kernel oops or hang reports involving rkisp1 after patching