In the Linux kernel, the following vulnerability has been resolved:
mmc: mmci: stm32: fix DMA API overlapping mappings warning
Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning:
DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST, overlapping mappings aren't supported WARNING: CPU: 1 PID: 51 at kernel/dma/debug.c:568 add_dma_entry+0x234/0x2f4 Modules linked in: CPU: 1 PID: 51 Comm: kworker/1:2 Not tainted 6.1.28 #1 Hardware name: STMicroelectronics STM32MP257F-EV1 Evaluation Board (DT) Workqueue: events_freezable mmc_rescan Call trace: add_dma_entry+0x234/0x2f4 debug_dma_map_sg+0x198/0x350 __dma_map_sg_attrs+0xa0/0x110 dma_map_sg_attrs+0x10/0x2c sdmmc_idma_prep_data+0x80/0xc0 mmci_prep_data+0x38/0x84 mmci_start_data+0x108/0x2dc mmci_request+0xe4/0x190 __mmc_start_request+0x68/0x140 mmc_start_request+0x94/0xc0 mmc_wait_for_req+0x70/0x100 mmc_send_tuning+0x108/0x1ac sdmmc_execute_tuning+0x14c/0x210 mmc_execute_tuning+0x48/0xec mmc_sd_init_uhs_card.part.0+0x208/0x464 mmc_sd_init_card+0x318/0x89c mmc_attach_sd+0xe4/0x180 mmc_rescan+0x244/0x320
DMA API debug brings to light leaking dma-mappings as dma_map_sg and dma_unmap_sg are not correctly balanced.
If an error occurs in mmci_cmd_irq function, only mmci_dma_error function is called and as this API is not managed on stm32 variant, dma_unmap_sg is never called in this error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfo | Aug 28, 2024 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jun 26, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-devel | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oracle-lts-22.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub