High · published October 9, 2024
In the Linux kernel, the following vulnerability has been resolved:
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0
(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an
inbound PCIe TLP spans more than two internal AXI 128-byte bursts,
the bus may corrupt the packet payload and the corrupt data may
cause associated applications or the processor to hang.
The workaround for Errata #i2037 is to limit the maximum read
request size and maximum payload size to 128 bytes. Add workaround
for Errata #i2037 here.
The errata and workaround is applicable only to AM65x SR 1.0 and
later versions of the silicon will have this fixed.
[1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.4.284 | 5.4.284 |
| linux/linux_kernel | ≥ 5.5, < 5.10.226 | 5.10.226 |
| linux/linux_kernel | ≥ 5.11, < 5.15.167 | 5.15.167 |
| linux/linux_kernel | ≥ 5.16, < 6.1.110 | 6.1.110 |
| linux/linux_kernel | ≥ 6.2, < 6.6.51 | 6.6.51 |
| linux/linux_kernel | ≥ 6.7, < 6.10.10 | 6.10.10 |