PT-2024-7740

CVE-2024-26787

·

Published

2024-02-14

·

Updated

2025-03-20

Description by

CVSS 3.1
7.0
High
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.28
Description The vulnerability is related to the Linux kernel's DMA API, specifically the dma map sg and dma unmap sg functions, which are not correctly balanced. This can lead to leaking dma-mappings, causing overlapping mappings to occur. The issue is triggered when the CONFIG DMA API DEBUG SG option is enabled, resulting in a warning message. The vulnerability can potentially allow an attacker to access confidential information.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the DMA API overlapping mappings warning. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
DLA-3842-1
DSA-5658-1
DSA-5681-1
OESA-2024-1622
OESA-2024-1647
OESA-2024-1648
OESA-2024-1681
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6871-1
USN-6892-1
USN-6919-1
USN-7022-1
USN-7022-2
USN-7022-3
USN-7119-1
Found an issue in the description? Have something to add? Feel free to write us 👾