CVE-2024-27409

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-27409
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27409.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27409
Downstream
Published
2024-05-17T11:50:39Z
Modified
2025-10-15T09:47:02.778391Z
Summary
dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup
Details

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as the HDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e74c39573d35e9ac441090ff8183aa3dc2540649
Fixed
227ef58a9b0c372efba422e8886a8015a1509eba
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e74c39573d35e9ac441090ff8183aa3dc2540649
Fixed
17be6f5cb223f22e4733ed8fe8b2247cbb677716
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e74c39573d35e9ac441090ff8183aa3dc2540649
Fixed
712a92a48158e02155b4b6b21e03a817f78c9b7e

Affected versions

v6.*

v6.4
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.8-rc1
v6.8-rc2
v6.8-rc3

Database specific

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "id": "CVE-2024-27409-12cc8518",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c",
                "function": "dw_hdma_v0_core_start"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@227ef58a9b0c372efba422e8886a8015a1509eba",
            "digest": {
                "function_hash": "284132004216019029344389808038984629674",
                "length": 1052.0
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "deprecated": false,
            "id": "CVE-2024-27409-3ea5506b",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@712a92a48158e02155b4b6b21e03a817f78c9b7e",
            "digest": {
                "line_hashes": [
                    "145103957122380956495825150220356173326",
                    "176192728912931487077300062749588575984",
                    "169501890807154562661751367231206938876",
                    "90655083787329229559453575117861081553",
                    "311448379351363173075146369430550226099",
                    "49453445053772944096609360634942068166",
                    "324992859378115151894373007850921439081"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "deprecated": false,
            "id": "CVE-2024-27409-65954e05",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c",
                "function": "dw_hdma_v0_core_start"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17be6f5cb223f22e4733ed8fe8b2247cbb677716",
            "digest": {
                "function_hash": "284132004216019029344389808038984629674",
                "length": 1052.0
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "deprecated": false,
            "id": "CVE-2024-27409-8415470a",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@227ef58a9b0c372efba422e8886a8015a1509eba",
            "digest": {
                "line_hashes": [
                    "145103957122380956495825150220356173326",
                    "176192728912931487077300062749588575984",
                    "169501890807154562661751367231206938876",
                    "90655083787329229559453575117861081553",
                    "311448379351363173075146369430550226099",
                    "49453445053772944096609360634942068166",
                    "324992859378115151894373007850921439081"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "deprecated": false,
            "id": "CVE-2024-27409-93d1c234",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17be6f5cb223f22e4733ed8fe8b2247cbb677716",
            "digest": {
                "line_hashes": [
                    "145103957122380956495825150220356173326",
                    "176192728912931487077300062749588575984",
                    "169501890807154562661751367231206938876",
                    "90655083787329229559453575117861081553",
                    "311448379351363173075146369430550226099",
                    "49453445053772944096609360634942068166",
                    "324992859378115151894373007850921439081"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "deprecated": false,
            "id": "CVE-2024-27409-ea9a4379",
            "target": {
                "file": "drivers/dma/dw-edma/dw-hdma-v0-core.c",
                "function": "dw_hdma_v0_core_start"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@712a92a48158e02155b4b6b21e03a817f78c9b7e",
            "digest": {
                "function_hash": "284132004216019029344389808038984629674",
                "length": 1052.0
            },
            "signature_version": "v1",
            "signature_type": "Function"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.21
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.9