CVE-2024-58006

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the PCI: dwc: ep component, where the pci epc set bar() function was modified to support dynamically changing the backing physical address of a BAR. However, this change introduced a potential issue where the set bar() function can be called twice without calling clear bar(), allowing the host to read memory not belonging to the new struct pci epf bar. The vulnerability can be exploited if the new BAR size/flags differ from the existing BAR configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.