In the Linux kernel, the following vulnerability has been resolved:
mmc: mmci: stm32: fix DMA API overlapping mappings warning
Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning:
DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST, overlapping mappings aren't supported WARNING: CPU: 1 PID: 51 at kernel/dma/debug.c:568 add_dma_entry+0x234/0x2f4 Modules linked in: CPU: 1 PID: 51 Comm: kworker/1:2 Not tainted 6.1.28 #1 Hardware name: STMicroelectronics STM32MP257F-EV1 Evaluation Board (DT) Workqueue: events_freezable mmc_rescan Call trace: add_dma_entry+0x234/0x2f4 debug_dma_map_sg+0x198/0x350 __dma_map_sg_attrs+0xa0/0x110 dma_map_sg_attrs+0x10/0x2c sdmmc_idma_prep_data+0x80/0xc0 mmci_prep_data+0x38/0x84 mmci_start_data+0x108/0x2dc mmci_request+0xe4/0x190 __mmc_start_request+0x68/0x140 mmc_start_request+0x94/0xc0 mmc_wait_for_req+0x70/0x100 mmc_send_tuning+0x108/0x1ac sdmmc_execute_tuning+0x14c/0x210 mmc_execute_tuning+0x48/0xec mmc_sd_init_uhs_card.part.0+0x208/0x464 mmc_sd_init_card+0x318/0x89c mmc_attach_sd+0xe4/0x180 mmc_rescan+0x244/0x320
DMA API debug brings to light leaking dma-mappings as dma_map_sg and dma_unmap_sg are not correctly balanced.
If an error occurs in mmci_cmd_irq function, only mmci_dma_error function is called and as this API is not managed on stm32 variant, dma_unmap_sg is never called in this error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.10.213-201.855Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-devel | Aug 28, 2024 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-symsUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-rt | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub