CVE-2024-27408

Summary

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7e4b8a4fbe2cecab0959e862604803d063f50029 < d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3affected
LinuxLinux7e4b8a4fbe2cecab0959e862604803d063f50029 < f396b4df27cfe01a99f4b41f584c49e56477be3aaffected
LinuxLinux7e4b8a4fbe2cecab0959e862604803d063f50029 < bbcc1c83f343e580c3aa1f2a8593343bf7b55bbaaffected
LinuxLinux5.3affected
LinuxLinux0 < 5.3unaffected
LinuxLinux6.6.21 <= 6.6.*unaffected
LinuxLinux6.7.9 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References