Fix clobbering of SWERR overflow bit on writeback in dmaengine: idxd
Summary
GSD-2021-1000029: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback. Affects Kernel versions >= bfe1d56091c1a404b3d4ce7e9809d745fc4453bb, < a5ad12d5d69c63af289a37f05187a0c6fe93553d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: idxd is a component of the Linux Kernel that provides support for Intel Data Streaming Accelerator (IDXD) devices. IDXD devices are used for offloading data movement and transformation tasks from the CPU, improving system performance. The dmaengine: idxd driver allows applications to utilize these devices for efficient data transfers. However, a vulnerability has been discovered in the driver that can lead to the clobbering of the SWERR overflow bit on writeback.
Vulnerability Detail
The vulnerability in the dmaengine: idxd driver occurs when writing back the status of a completed descriptor. Due to a coding error, the SWERR overflow bit, which indicates an overflow condition in the software error queue, can be overwritten. This can result in the loss of important error information and potentially mask critical errors. An attacker could potentially exploit this vulnerability to hide or manipulate error conditions, leading to system instability or security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above.
Conclusion
The vulnerability in the dmaengine: idxd driver can lead to the clobbering of the SWERR overflow bit on writeback, potentially hiding or manipulating error conditions. It is crucial to update the Linux Kernel to the recommended version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dmaengine: idxd is a component of the Linux Kernel that provides support for Intel Data Streaming Accelerator (IDXD) devices. It allows applications to offload data movement and transformation tasks from the CPU to improve system performance.
The vulnerability can lead to the clobbering of the SWERR overflow bit on writeback, potentially hiding or manipulating error conditions. This can result in system instability or security breaches.
To fix this vulnerability, update the Linux Kernel to version v5.10.32 or later by applying commit a5ad12d5d69c63af289a37f05187a0c6fe93553d from the Linux Kernel repository.
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2021-1000029.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
