dmaengine: ptdma: check for null desc before calling pt_cmd_callback (Linux Linux)

CVE-2023-53755
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.18 % · centile 8 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: check for null desc before calling pt_cmd_callback Resolves a panic that can occur on AMD systems, typically during host shutdown, after the PTDMA driver had been exercised. The issue was the pt_issue_pending() function is mistakenly assuming that there will be at least one descriptor in the Submitted queue when the function is called. However, it is possible that both the Submitted and Issued queues could be empty, which could result in pt_cmd_callback() being mistakenly called with a NULL pointer. Ref: Bugzilla Bug 216856.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected 6fa7e0e836e23e2c758ac3930b040c8abbbf8a6f < 8ae2113702613207efc05453bc9a3df2b992bf45 ; affected 6fa7e0e836e23e2c758ac3930b040c8abbbf8a6f < 5bba023b1241c7af5d40447503a68de282ad5190 ; affected 6fa7e0e836e23e2c758ac3930b040c8abbbf8a6f < 928469986171a6f763b34b039427f5667ba3fd50
Linux · Linuxaffected 5.18 ; unaffected 0 < 5.18 ; unaffected 6.1.16 ≤ 6.1.* ; unaffected 6.2.3 ≤ 6.2.* ; unaffected 6.3 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD