CVE-2024-42242: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-07 · updated 2026-06-17
Weakness: CWE-770

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensured: if (max_size < PAGE_SIZE) max_size = PAGE_SIZE; whereas: blk_validate_limits() makes it an error: if (WARN_ON_ONCE(lim->max_segment_size < PAGE_SIZE)) return -EINVAL; The change from one to the other, exposed sdhci which was setting maximum segment size too low in some circumstances. Fix the maximum segment size when it is too low.

Affected products

Linux kernel: from 6.9 before 6.9.10 — fixed in 6.9.10

How to fix

Upgrade to a fixed version: Linux kernel 6.9.10. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-42242 or the next vulnerability affects your stack