CVE-2024-27409

CVE-2024-27409

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as

the HDMA controller register. If the doorbell register is toggled before

the full write of the linked list a race condition error will occur.

In remote setup we can only use a readl to the memory to assure the full

write has occurred.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2024-05-17T16:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.5, < 6.6.216.6.21
linux/linux_kernel≥ 6.7, < 6.7.96.7.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 17 MAY 11:50Z
    dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup
    cvelistv5