Critical DMA Mapping Vulnerability in Linux Kernel - CVE-2024-53058
Summary
CVE-2024-53058: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload t... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports various functionalities, including process management, memory management, and device control. This vulnerability specifically affects the stmmac driver, which is responsible for Ethernet communication on various platforms. The issue arises from improper handling of DMA (Direct Memory Access) mapping and unmapping, leading to potential data corruption and system instability.
Vulnerability Detail
CVE-2024-53058 is a vulnerability in the Linux kernel's stmmac driver, where the DMA mapping for non-paged SKB (Socket Buffer) data is incorrectly managed. This mismanagement can result in the DMA engine accessing unmapped or unreferenced memory regions, potentially causing data corruption or IOMMU faults. The vulnerability is triggered when the non-paged data of an SKB exceeds certain size limits or when the DMA AXI address width is configured incorrectly. The flaw stems from an incorrect assignment of buffer addresses in the tx_skbuff_dma array, leading to improper unmapping of DMA buffers.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. Users are encouraged to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
CVE-2024-53058 is a significant vulnerability in the Linux kernel's stmmac driver, leading to potential data corruption and system instability due to improper DMA mapping. Users are strongly advised to update their systems to the patched version to ensure security. Regular monitoring and updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
CVE-2024-53058 is a vulnerability in the Linux kernel's stmmac driver that affects DMA mapping for non-paged SKB data, potentially leading to data corruption.
If exploited, this vulnerability can cause the DMA engine to access invalid memory regions, resulting in data corruption or system crashes.
Versions of the Linux kernel prior to the patched version 6.11.7-1 for Debian 13 are affected. Users should check their kernel version.
You can use Vulert, which monitors open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
While no specific workarounds are available, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
