CVE-2024-26790

Katalog CVE

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan Improper Locking pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read There is chip (ls1028a) errata: The SoC may hang on 16 byte unaligned read transactions by QDMA. Unaligned read transactions initiated by QDMA may stall in the NOC (Network On-Chip), causing a deadlock condition. Stalled transactions will trigger completion timeouts in PCIe controller. Workaround: Enable prefetch by setting the source descriptor prefetchable bit ( SD[PF] = 1 ). Implement this workaround.

Rincian

Terbit di NVD

4 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/106c1ac953a66556ec77456c46e818208d3a9bce patch
• https://git.kernel.org/stable/c/237ecf1afe6c22534fa43abdf2bf0b0f52de0aaa patch
• https://git.kernel.org/stable/c/518d78b4fac68cac29a263554d7f3b19da99d0da patch
• https://git.kernel.org/stable/c/5b696e9c388251f1c7373be92293769a489fd367 patch
• https://git.kernel.org/stable/c/9d739bccf261dd93ec1babf82f5c5d71dd4caa3e patch
• https://git.kernel.org/stable/c/ad2f8920c314e0a2d9e984fc94b729eca3cda471 patch
• https://git.kernel.org/stable/c/bb3a06e9b9a30e33d96aadc0e077be095a4f8580 patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list