CVE-2021-47477

comedi: dt9812: fix DMA buffers on stack

Medium · published May 22, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

comedi: dt9812: fix DMA buffers on stack

USB transfer buffers are typically mapped for DMA and must not be

allocated on the stack or transfers will fail.

Allocate proper transfer buffers in the various command helpers and

return an error on short transfers instead of acting on random stack

data.

Note that this also fixes a stack info leak on systems where DMA is not

used as 32 bytes are always sent to the device regardless of how short

the command is.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00721 · 53.4th percentile
Published
2024-05-22T08:19Z
EPSS history
Timeline
  • 22 MAY 08:19Z
    comedi: dt9812: fix DMA buffers on stack
    cvelistv5