In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails
The spi controller supports 44-bit address space on AXI in DMA mode, so set dma_addr_t width to 44-bit to avoid using a swiotlb mapping. In addition, if dma_map_single fails, it should return immediately instead of continuing doing the DMA operation which bases on invalid address.
This fixes the following crash which occurs in reading a big block from flash:
[ 123.633577] zynqmp-qspi ff0f0000.spi: swiotlb buffer is full (sz: 4194304 bytes), total 32768 (slots), used 0 (slots) [ 123.644230] zynqmp-qspi ff0f0000.spi: ERR:rxdma:memory not mapped [ 123.784625] Unable to handle kernel paging request at virtual address 00000000003fffc0 [ 123.792536] Mem abort info: [ 123.795313] ESR = 0x96000145 [ 123.798351] EC = 0x25: DABT (current EL), IL = 32 bits [ 123.803655] SET = 0, FnV = 0 [ 123.806693] EA = 0, S1PTW = 0 [ 123.809818] Data abort info: [ 123.812683] ISV = 0, ISS = 0x00000145 [ 123.816503] CM = 1, WnR = 1 [ 123.819455] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000805047000 [ 123.825887] [00000000003fffc0] pgd=0000000803b45003, p4d=0000000803b45003, pud=0000000000000000 [ 123.834586] Internal error: Oops: 96000145 [#1] PREEMPT SMP
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-rockchip | Aug 9, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub