Critical DMA Mapping Vulnerability in Linux Package: Potential Data Corruption Risk
Summary
DEBIAN-CVE-2024-53058: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload t... Affects linux versions < 6.1.119-1. Fixed in 6.1.119-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and is known for its stability and performance. However, it is susceptible to vulnerabilities that can compromise system integrity and data security, such as the one described in this report.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the net: stmmac module related to the Transmission Segmentation Offload (TSO) feature. This issue arises when non-paged data of a socket buffer (SKB) is improperly handled during DMA mapping and unmapping processes. Specifically, if the DMA AXI address width is configured incorrectly or if the size of the non-paged data exceeds TSO_MAX_BUFF_SIZE, the system may allocate insufficient DMA descriptors. This can lead to a situation where the DMA engine accesses unmapped memory, resulting in data corruption or IOMMU faults. The root cause stems from incorrect assignment of DMA buffer addresses in the code, which can have severe consequences for data transmission integrity.
How To Fix
Minimum fixed version
6.1.119-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the TSO feature until the package is updated. This can be done by disabling TSO in the network interface settings. For example, use the command: sudo ethtool -K <interface> tso off, replacing <interface> with the actual network interface name.
Conclusion
This report highlights a critical vulnerability in the Linux package related to improper DMA mapping, which can lead to severe data integrity issues. Users are urged to update their systems to the patched versions as soon as possible and consider temporary workarounds to mitigate risks until updates are applied.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to data corruption or system crashes due to improper DMA mapping, affecting the integrity of transmitted data.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If an immediate update is not possible, consider disabling the TSO feature as a temporary workaround to mitigate risks.
Yes, the vulnerability affects specific versions of the Linux package across Debian 11, 12, 13, and 14.
Regularly update your packages and monitor for vulnerabilities using tools like Vulert to maintain system security.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
