CVE-2024-50297CWE-362

CVE-2024-50297

High · published November 19, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts

Enqueue packets in dql after dma engine starts causes race condition.

Tx transfer starts once dma engine is started and may execute dql dequeue

in completion before it gets queued. It results in following kernel crash

while running iperf stress test:

kernel BUG at lib/dynamic_queue_limits.c:99!

<snip>

Internal error: Oops - BUG: 00000000f2000800 [#1] SMP

pc : dql_completed+0x238/0x248

lr : dql_completed+0x3c/0x248

Call trace:

dql_completed+0x238/0x248

axienet_dma_tx_cb+0xa0/0x170

xilinx_dma_do_tasklet+0xdc/0x290

tasklet_action_common+0xf8/0x11c

tasklet_action+0x30/0x3c

handle_softirqs+0xf8/0x230

<snip>

Start dmaengine after enqueue in dql fixes the crash.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-11-19T07:16Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.11.86.11.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 19 NOV 01:30Z
    net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
    cvelistv5