In the Linux kernel, the following vulnerability has been resolved:
Avoid hw_desc array overrun in dw-axi-dmac
I have a use case where nr_buffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descs_allocated to be 9. Since axi_desc_put() handles the hw_desc considering the descs_allocated, this scenario would result in a kernel panic (hw_desc array will be overrun).
To fix this, the proposal is to add a new member to the axi_dma_desc structure, where we keep the number of allocated hw_descs (axi_desc_alloc()) and use it in axi_desc_put() to handle the hw_desc array correctly.
Additionally I propose to remove the axi_chan_start_first_queued() call after completing the transfer, since it was identified that unbalance can occur (started descriptors can be interrupted and transfer ignored due to DMA channel not being enabled).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-vdso | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub