CVE-2024-27409
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the HDMA controller…
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the HDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716Patch
- https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509ebaPatch
- https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7ePatch
- https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716Patch
- https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509ebaPatch
- https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7ePatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.