dmaengine: idxd: fix wq cleanup of WQCFG registers (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 13 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command instead of blasting the MMIO region. This also address an issue where we clobber registers in future devices.
Faiblesses (CWE)
- CWE-668 — Exposition d'une ressource à la mauvaise sphère
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-33565
- GCVE · GCVE-0-2021-46917
Avis du CERT-FR
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.8.0 < 5.10.32cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.11.16
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected da32b28c95a79e399e18c03f8178f41aec9c66e4 < e5eb9757fe4c2392e069246ae78badc573af1833 ; affected da32b28c95a79e399e18c03f8178f41aec9c66e4 < f7dc8f5619165e1fa3383d0c2519f502d9e2a1a9 ; affected da32b28c95a79e399e18c03f8178f41aec9c66e4 < ea9aadc06a9f10ad20a90edc0a484f1147d88a7a ; affected 2a2df2bd10de44c3804661ed15157817c12d6291 ; affected 5.7.10 < 5.8 |
| Linux · Linux | affected 5.8 ; unaffected 0 < 5.8 ; unaffected 5.10.32 ≤ 5.10.* ; unaffected 5.11.16 ≤ 5.11.* ; unaffected 5.12 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |