CVE-2024-27408

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

At a glance

Severity
HIGH 7.8
EPSS
EPSS 0.19 % · percentile 9 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1MEDIUM 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 7e4b8a4fbe2cecab0959e862604803d063f50029 < d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3 ; affected 7e4b8a4fbe2cecab0959e862604803d063f50029 < f396b4df27cfe01a99f4b41f584c49e56477be3a ; affected 7e4b8a4fbe2cecab0959e862604803d063f50029 < bbcc1c83f343e580c3aa1f2a8593343bf7b55bba
Linux · Linuxaffected 5.3 ; unaffected 0 < 5.3 ; unaffected 6.6.21 ≤ 6.6.* ; unaffected 6.7.9 ≤ 6.7.* ; unaffected 6.8 ≤ *

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD