CVE-2024-27408

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

State: Published
Severity: 7.8 High
Published: May 17, 2024
Updated: Oct 30, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7e4b8a4fbe2cecab0959e862604803d063f50029 to before 85cb0ca8efa483e5d22385ea12fc5857c48a0904Affected 7e4b8a4fbe2cecab0959e862604803d063f50029 to before d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3Affected 7e4b8a4fbe2cecab0959e862604803d063f50029 to before f396b4df27cfe01a99f4b41f584c49e56477be3aAffected 7e4b8a4fbe2cecab0959e862604803d063f50029 to before bbcc1c83f343e580c3aa1f2a8593343bf7b55bbaAffected
LinuxLinux	5.3Affected before 5.3Not affected 6.1.191 through 6.1.Not affected 6.6.21 through 6.6.Not affected 6.7.9 through 6.7.*Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.