CVE-2024-27408

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

En bref

Sévérité
HIGH 7.8
EPSS
EPSS 0.19 % · centile 9 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1MEDIUM 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 7e4b8a4fbe2cecab0959e862604803d063f50029 < d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3 ; affected 7e4b8a4fbe2cecab0959e862604803d063f50029 < f396b4df27cfe01a99f4b41f584c49e56477be3a ; affected 7e4b8a4fbe2cecab0959e862604803d063f50029 < bbcc1c83f343e580c3aa1f2a8593343bf7b55bba
Linux · Linuxaffected 5.3 ; unaffected 0 < 5.3 ; unaffected 6.6.21 ≤ 6.6.* ; unaffected 6.7.9 ≤ 6.7.* ; unaffected 6.8 ≤ *

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD