CVE-2024-47667

PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

State: Published
Severity: 7.3 High
Published: Oct 9, 2024
Updated: Aug 5, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang.

The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here.

The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed.

[1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	18b0415bc802a8bab5dedba5ae2757e83259e6ee to before cfb006e185f64edbbdf7869eac352442bc76b8f6Affected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before ebbdbbc580c1695dec283d0ba6448729dc993246Affected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 135843c351c08df72bdd4b4ebea53c8052a76881Affected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before af218c803fe298ddf00abef331aa526b20d7ea61Affected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572Affected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before dd47051c76c8acd8cb983f01b4d1265da29cb66aAffected 18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 86f271f22bbb6391410a07e08d6ca3757fda01faAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.284 through 5.4.Not affected 5.10.226 through 5.10.Not affected 5.15.167 through 5.15.Not affected 6.1.110 through 6.1.Not affected 6.6.51 through 6.6.Not affected 6.10.10 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

18b0415bc802a8bab5dedba5ae2757e83259e6ee to before cfb006e185f64edbbdf7869eac352442bc76b8f6Affected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before ebbdbbc580c1695dec283d0ba6448729dc993246Affected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 135843c351c08df72bdd4b4ebea53c8052a76881Affected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before af218c803fe298ddf00abef331aa526b20d7ea61Affected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572Affected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before dd47051c76c8acd8cb983f01b4d1265da29cb66aAffected
18b0415bc802a8bab5dedba5ae2757e83259e6ee to before 86f271f22bbb6391410a07e08d6ca3757fda01faAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.284 through 5.4.*Not affected
5.10.226 through 5.10.*Not affected
5.15.167 through 5.15.*Not affected
6.1.110 through 6.1.*Not affected
6.6.51 through 6.6.*Not affected
6.10.10 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.