In the Linux kernel, the following vulnerability has been resolved:
mmc: mmci: stm32: fix DMA API overlapping mappings warning
Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning:
DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST, overlapping mappings aren't supported WARNING: CPU: 1 PID: 51 at kernel/dma/debug.c:568 add_dma_entry+0x234/0x2f4 Modules linked in: CPU: 1 PID: 51 Comm: kworker/1:2 Not tainted 6.1.28 #1 Hardware name: STMicroelectronics STM32MP257F-EV1 Evaluation Board (DT) Workqueue: events_freezable mmc_rescan Call trace: add_dma_entry+0x234/0x2f4 debug_dma_map_sg+0x198/0x350 __dma_map_sg_attrs+0xa0/0x110 dma_map_sg_attrs+0x10/0x2c sdmmc_idma_prep_data+0x80/0xc0 mmci_prep_data+0x38/0x84 mmci_start_data+0x108/0x2dc mmci_request+0xe4/0x190 __mmc_start_request+0x68/0x140 mmc_start_request+0x94/0xc0 mmc_wait_for_req+0x70/0x100 mmc_send_tuning+0x108/0x1ac sdmmc_execute_tuning+0x14c/0x210 mmc_execute_tuning+0x48/0xec mmc_sd_init_uhs_card.part.0+0x208/0x464 mmc_sd_init_card+0x318/0x89c mmc_attach_sd+0xe4/0x180 mmc_rescan+0x244/0x320
DMA API debug brings to light leaking dma-mappings as dma_map_sg and dma_unmap_sg are not correctly balanced.
If an error occurs in mmci_cmd_irq function, only mmci_dma_error function is called and as this API is not managed on stm32 variant, dma_unmap_sg is never called in this error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64 | Aug 28, 2024 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-amazonUpgrade dlm-kmp-azure | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intelUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1121-kvm | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub