CVE-2024-27409 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the HDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716
https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509eba
https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7e
https://lore.kernel.org/linux-cve-announce/2024051701-CVE-2024-27409-f797@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-27409
https://www.cve.org/CVERecord?id=CVE-2024-27409

History

Thu, 19 Dec 2024 09:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-17T11:50:39.756Z

Updated: 2024-12-19T08:54:29.043Z

Reserved: 2024-02-25T13:47:42.682Z

Link: CVE-2024-27409

Vulnrichment

Updated: 2024-08-02T00:34:52.290Z

NVD

Status : Awaiting Analysis

Published: 2024-05-17T12:15:11.460

Modified: 2024-11-21T09:04:33.653

Link: CVE-2024-27409

Redhat

Severity : Moderate

Publid Date: 2024-05-17T00:00:00Z

Links: CVE-2024-27409 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-27409", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:47:42.682Z", "datePublished": "2024-05-17T11:50:39.756Z", "dateUpdated": "2024-12-19T08:54:29.043Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:54:29.043Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup\n\nThe Linked list element and pointer are not stored in the same memory as\nthe HDMA controller register. If the doorbell register is toggled before\nthe full write of the linked list a race condition error will occur.\nIn remote setup we can only use a readl to the memory to assure the full\nwrite has occurred."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/dw-edma/dw-hdma-v0-core.c"], "versions": [{"version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "227ef58a9b0c372efba422e8886a8015a1509eba", "status": "affected", "versionType": "git"}, {"version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "17be6f5cb223f22e4733ed8fe8b2247cbb677716", "status": "affected", "versionType": "git"}, {"version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "712a92a48158e02155b4b6b21e03a817f78c9b7e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/dw-edma/dw-hdma-v0-core.c"], "versions": [{"version": "6.5", "status": "affected"}, {"version": "0", "lessThan": "6.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.21", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.9", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509eba"}, {"url": "https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716"}, {"url": "https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7e"}], "title": "dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27409", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-20T17:32:55.652133Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:46:17.954Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:34:52.290Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509eba", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7e", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509eba", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7e", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:34:52.290Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27409", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-20T17:32:55.652133Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.079Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "227ef58a9b0c372efba422e8886a8015a1509eba", "versionType": "git"}, {"status": "affected", "version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "17be6f5cb223f22e4733ed8fe8b2247cbb677716", "versionType": "git"}, {"status": "affected", "version": "e74c39573d35e9ac441090ff8183aa3dc2540649", "lessThan": "712a92a48158e02155b4b6b21e03a817f78c9b7e", "versionType": "git"}], "programFiles": ["drivers/dma/dw-edma/dw-hdma-v0-core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"status": "unaffected", "version": "0", "lessThan": "6.5", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.21", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.9", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/dma/dw-edma/dw-hdma-v0-core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/227ef58a9b0c372efba422e8886a8015a1509eba"}, {"url": "https://git.kernel.org/stable/c/17be6f5cb223f22e4733ed8fe8b2247cbb677716"}, {"url": "https://git.kernel.org/stable/c/712a92a48158e02155b4b6b21e03a817f78c9b7e"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup\n\nThe Linked list element and pointer are not stored in the same memory as\nthe HDMA controller register. If the doorbell register is toggled before\nthe full write of the linked list a race condition error will occur.\nIn remote setup we can only use a readl to the memory to assure the full\nwrite has occurred."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:54:29.043Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27409", "state": "PUBLISHED", "dateUpdated": "2024-12-19T08:54:29.043Z", "dateReserved": "2024-02-25T13:47:42.682Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-17T11:50:39.756Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}