PCI: dwc: Fix setting error return on MSI DMA mapping failure
Summary
GSD-2022-1003585: PCI: dwc: Fix setting error return on MSI DMA mapping failure. Affects Kernel versions >= 07940c369a6bf940ec4a00eeb76bf51daa4f3973, < acd99f384cb303bf8b7bb6fa5884e9fd26b69855. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The PCI package in the Linux Kernel is responsible for managing communication between peripheral devices and the CPU via the PCI bus. It provides drivers and functions for handling various PCI-related operations. The dwc (DesignWare Core) is a popular IP core used in many PCI controllers. This vulnerability affects the dwc driver in the Linux Kernel.
Vulnerability Detail
The vulnerability in the dwc driver occurs when there is a failure in mapping Direct Memory Access (DMA) for Message Signaled Interrupts (MSI). In such cases, the driver fails to properly set the error return value, potentially leading to incorrect behavior or crashes. The impact of this vulnerability depends on the specific use case and the driver's response to the error condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The PCI dwc driver in the Linux Kernel is vulnerable to a mapping failure of MSI DMA, which can result in incorrect behavior or crashes. The vulnerability has been fixed in Linux Kernel version v5.10.121. Users should update their Linux Kernel to the latest version to ensure their systems are protected. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability depends on the specific use case and the driver's response to the error condition. It could potentially lead to incorrect behavior or crashes.
You can use tools like Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert Playground allows you to analyze your manifest file (e.g., package-lock.json) and provides real-time alerts for open-source vulnerabilities.
Yes, the vulnerability has been fixed in Linux Kernel version v5.10.121 by commit acd99f384cb303bf8b7bb6fa5884e9fd26b69855. Users should update their Linux Kernel to version v5.10.121 or later to apply the patch.
There are no known exploits for this vulnerability at the time of writing. However, it is always recommended to apply security patches promptly to mitigate potential risks.
You can find more information about this vulnerability in the GSD-2022-1003585 entry of the GSD database maintained by the Cloud Security Alliance. The source link is provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
