dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 12 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver avoids clobbering the OVERFLOW bit that comes after the register is read.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | CISA-ADP |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2021-33568
- GCVE · GCVE-0-2021-46920
Avis du CERT-FR
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.6.0 < 5.10.32cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.11.16
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < a5ad12d5d69c63af289a37f05187a0c6fe93553d ; affected bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < 02981a44a0e402089775416371bd2e0c935685f8 ; affected bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < ea941ac294d75d0ace50797aebf0056f6f8f7a7f |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 5.10.32 ≤ 5.10.* ; unaffected 5.11.16 ≤ 5.11.* ; unaffected 5.12 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |