In the Linux kernel, the following vulnerability has been resolved:
mmc: mmci: stm32: fix DMA API overlapping mappings warning
Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning:
DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST, overlapping mappings aren't supported WARNING: CPU: 1 PID: 51 at kernel/dma/debug.c:568 add_dma_entry+0x234/0x2f4 Modules linked in: CPU: 1 PID: 51 Comm: kworker/1:2 Not tainted 6.1.28 #1 Hardware name: STMicroelectronics STM32MP257F-EV1 Evaluation Board (DT) Workqueue: events_freezable mmc_rescan Call trace: add_dma_entry+0x234/0x2f4 debug_dma_map_sg+0x198/0x350 __dma_map_sg_attrs+0xa0/0x110 dma_map_sg_attrs+0x10/0x2c sdmmc_idma_prep_data+0x80/0xc0 mmci_prep_data+0x38/0x84 mmci_start_data+0x108/0x2dc mmci_request+0xe4/0x190 __mmc_start_request+0x68/0x140 mmc_start_request+0x94/0xc0 mmc_wait_for_req+0x70/0x100 mmc_send_tuning+0x108/0x1ac sdmmc_execute_tuning+0x14c/0x210 mmc_execute_tuning+0x48/0xec mmc_sd_init_uhs_card.part.0+0x208/0x464 mmc_sd_init_card+0x318/0x89c mmc_attach_sd+0xe4/0x180 mmc_rescan+0x244/0x320
DMA API debug brings to light leaking dma-mappings as dma_map_sg and dma_unmap_sg are not correctly balanced.
If an error occurs in mmci_cmd_irq function, only mmci_dma_error function is called and as this API is not managed on stm32 variant, dma_unmap_sg is never called in this error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64 | Aug 28, 2024 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-xilinx | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1133-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-196-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-bluefieldUpgrade linux-image-oem-20.04c | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub