Fix clobbering of SWERR overflow bit on writeback in dmaengine: idxd
Summary
GSD-2021-1000023: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback. Affects Kernel versions >= bfe1d56091c1a404b3d4ce7e9809d745fc4453bb, < 02981a44a0e402089775416371bd2e0c935685f8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: idxd is a component of the Linux Kernel that provides support for Intel Data Streaming Accelerator (IDXD) devices. These devices are used for high-performance data movement in various applications. The vulnerability in question affects the writeback process of the SWERR overflow bit, which can lead to incorrect behavior and potential security issues.
Vulnerability Detail
The vulnerability arises from a clobbering issue in the dmaengine: idxd component when handling the SWERR overflow bit during writeback. This can result in the loss of important error information and potentially allow malicious actors to exploit the system. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in dmaengine: idxd that caused the clobbering of the SWERR overflow bit on writeback has been fixed in Linux Kernel version v5.11.16. Users are advised to update their Linux Kernel to this version or later to mitigate the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dmaengine: idxd is a component of the Linux Kernel that provides support for Intel Data Streaming Accelerator (IDXD) devices. These devices are used for high-performance data movement in various applications.
The vulnerability can result in the loss of important error information and potentially allow malicious actors to exploit the system.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix the vulnerability, users are advised to update their Linux Kernel to version v5.11.16 or later.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2021-1000023.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
