PT-2024-7740
CVE-2024-26787
·
تاريخ النشر
2024-02-14
·
تاريخ التحديث
2025-03-20
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.28
Description
The vulnerability is related to the Linux kernel's DMA API, specifically the
dma map sg and dma unmap sg functions, which are not correctly balanced. This can lead to leaking dma-mappings, causing overlapping mappings to occur. The issue is triggered when the CONFIG DMA API DEBUG SG option is enabled, resulting in a warning message. The vulnerability can potentially allow an attacker to access confidential information.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the DMA API overlapping mappings warning.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾