CVE-2024-27408: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-17 · updated 2026-10-30
Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Affected products

Linux kernel: from 5.3 before 6.6.21; from 6.7 before 6.7.9; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4, 6.8-rc5, 6.8-rc6 — fixed in 6.6.21, 6.7.9
Linux: 5.3 — fixed in 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.6.21, 6.7.9; Linux 6.8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-27408 or the next vulnerability affects your stack