In the Linux kernel, the following vulnerability has been resolved:
mmc: mmci: stm32: fix DMA API overlapping mappings warning
Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning:
DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST, overlapping mappings aren't supported WARNING: CPU: 1 PID: 51 at kernel/dma/debug.c:568 add_dma_entry+0x234/0x2f4 Modules linked in: CPU: 1 PID: 51 Comm: kworker/1:2 Not tainted 6.1.28 #1 Hardware name: STMicroelectronics STM32MP257F-EV1 Evaluation Board (DT) Workqueue: events_freezable mmc_rescan Call trace: add_dma_entry+0x234/0x2f4 debug_dma_map_sg+0x198/0x350 __dma_map_sg_attrs+0xa0/0x110 dma_map_sg_attrs+0x10/0x2c sdmmc_idma_prep_data+0x80/0xc0 mmci_prep_data+0x38/0x84 mmci_start_data+0x108/0x2dc mmci_request+0xe4/0x190 __mmc_start_request+0x68/0x140 mmc_start_request+0x94/0xc0 mmc_wait_for_req+0x70/0x100 mmc_send_tuning+0x108/0x1ac sdmmc_execute_tuning+0x14c/0x210 mmc_execute_tuning+0x48/0xec mmc_sd_init_uhs_card.part.0+0x208/0x464 mmc_sd_init_card+0x318/0x89c mmc_attach_sd+0xe4/0x180 mmc_rescan+0x244/0x320
DMA API debug brings to light leaking dma-mappings as dma_map_sg and dma_unmap_sg are not correctly balanced.
If an error occurs in mmci_cmd_irq function, only mmci_dma_error function is called and as this API is not managed on stm32 variant, dma_unmap_sg is never called in this error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.213-201.855Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfo | Aug 28, 2024 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-vanilla | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub