CVE-2024-53225

iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift

Medium · published December 27, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift

When configuring a kernel with PAGE_SIZE=4KB, depending on its setting of

CONFIG_CMA_ALIGNMENT, VCMDQ_LOG2SIZE_MAX=19 could fail the alignment test

and trigger a WARN_ON:

WARNING: at drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3646

Call trace:

arm_smmu_init_one_queue+0x15c/0x210

tegra241_cmdqv_init_structures+0x114/0x338

arm_smmu_device_probe+0xb48/0x1d90

Fix it by capping max_n_shift to CMDQ_MAX_SZ_SHIFT as SMMUv3 CMDQ does.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.4th percentile
Published
2024-12-27T13:50Z
EPSS history
Timeline
  • 27 DEC 13:50Z
    iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift
    cvelistv5