PT-2024-7740

CVE-2024-26787

·

تاريخ النشر

2024-02-14

·

تاريخ التحديث

2025-03-20

الوصف من

CVSS 3.1
7.0
عالية
المقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.28
Description The vulnerability is related to the Linux kernel's DMA API, specifically the dma map sg and dma unmap sg functions, which are not correctly balanced. This can lead to leaking dma-mappings, causing overlapping mappings to occur. The issue is triggered when the CONFIG DMA API DEBUG SG option is enabled, resulting in a warning message. The vulnerability can potentially allow an attacker to access confidential information.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the DMA API overlapping mappings warning. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
DLA-3842-1
DSA-5658-1
DSA-5681-1
OESA-2024-1622
OESA-2024-1647
OESA-2024-1648
OESA-2024-1681
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6871-1
USN-6892-1
USN-6919-1
USN-7022-1
USN-7022-2
USN-7022-3
USN-7119-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾