CVE-2024-43860

What it actually does

Missing NULL check after of_parse_phandle in imx_rproc_addr_init allows dereference of a NULL pointer returned for empty phandles, resulting in kernel memory corruption and denial of service.

Why it matters to the business

Affected Linux systems using the i.MX remote processor driver risk sudden crashes or reboots that interrupt workloads, with 28 downstream dependents amplifying exposure across embedded and industrial deployments.

How an attack unfolds

An attacker with local access supplies or triggers a device tree containing empty phandles during remoteproc initialization; the missing NULL guard causes an immediate dereference and kernel panic. No widespread exploitation by named actors has been observed.

How to fix it

Upgrade the Linux kernel to a fixed commit such as 6884fd0283e0831be153fb8d82d9eda8a55acaaa. Rebuild and deploy the updated kernel image, then reboot affected hosts.

How to confirm the fix worked

Verify the patch is present by confirming the added NULL-return check in imx_rproc_addr_init; test by loading the driver with an empty-phandle device tree and confirm no oops occurs.

Typical attack path

1. Obtain local user or privileged access on a vulnerable system
2. Trigger remoteproc driver initialization with a crafted device tree node
3. Force of_count_phandle_with_args to count empty phandles
4. Execute the parsing loop so of_parse_phandle returns NULL
5. Trigger the subsequent NULL dereference to crash the kernel

How to detect it

Search kernel logs for oops or panic messages referencing imx_rproc_addr_init or NULL pointer dereference during remoteproc initialization; correlate with device tree load events.

What your security team should do

• Apply the kernel fix containing commit 6884fd0283e0831be153fb8d82d9eda8a55acaaa within the next maintenance window
• Inventory all systems using the imx_rproc driver and schedule reboots
• Add kernel crash monitoring for remoteproc-related oops patterns
• Review device trees for empty phandle entries as a temporary hardening step