CVE-2024-27409

dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup

State: Published
Severity: 7.8 High
Published: May 17, 2024
Updated: Aug 5, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as the HDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e74c39573d35e9ac441090ff8183aa3dc2540649 to before 227ef58a9b0c372efba422e8886a8015a1509ebaAffected e74c39573d35e9ac441090ff8183aa3dc2540649 to before 17be6f5cb223f22e4733ed8fe8b2247cbb677716Affected e74c39573d35e9ac441090ff8183aa3dc2540649 to before 712a92a48158e02155b4b6b21e03a817f78c9b7eAffected
LinuxLinux	6.5Affected before 6.5Not affected 6.6.21 through 6.6.Not affected 6.7.9 through 6.7.Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.