Log in Start free

Vulnerability · Published May 17, 2024 · Assigned by Linux

CVE-2024-27408dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2024-27408
Debian:13linux6.7.9-1DEBIAN-CVE-2024-27408
Debian:14linux6.7.9-1DEBIAN-CVE-2024-27408
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-27408
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-27408

Affected products (as reported)

VendorProductVersions
Linux Linux 7e4b8a4fbe2cecab0959e862604803d063f50029 – before 85cb0ca8efa483e5d22385ea12fc5857c48a09047e4b8a4fbe2cecab0959e862604803d063f50029 – before d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd37e4b8a4fbe2cecab0959e862604803d063f50029 – before f396b4df27cfe01a99f4b41f584c49e56477be3a7e4b8a4fbe2cecab0959e862604803d063f50029 – before bbcc1c83f343e580c3aa1f2a8593343bf7b55bba
Linux Linux 5.3

References