Vulnerability in dmaengine: qcom: bam_dma
Summary
GSD-2022-1004418: dmaengine: qcom: bam_dma: fix runtime PM underflow. Affects Kernel versions >= dbad41e7bb5f4b9949ff5ea1d76c20711f326308, < 2f6ded79068cac8cff41d5d5632564165d98ee12. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine package is a component of the Linux Kernel that provides a framework for managing DMA (Direct Memory Access) operations. It allows devices to transfer data directly to and from memory without involving the CPU. The qcom: bam_dma driver is a specific implementation within dmaengine for Qualcomm platforms. It enables efficient data transfers between peripherals and memory using the BAM (Bus Access Manager) hardware. However, a vulnerability has been discovered in this driver that could lead to a runtime PM (Power Management) underflow.
Vulnerability Detail
The vulnerability in dmaengine: qcom: bam_dma is caused by a runtime PM underflow. Runtime PM is a mechanism in the Linux Kernel that allows devices to be powered down when they are not in use, conserving energy. However, in this case, the implementation of runtime PM in the qcom: bam_dma driver has a flaw that can result in an underflow. This underflow can lead to incorrect power management operations, potentially causing the device to malfunction or crash. An attacker with local access to the system may be able to exploit this vulnerability to disrupt the normal functioning of the device or gain elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to update their Linux Kernel to the fixed version as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in dmaengine: qcom: bam_dma can lead to a runtime PM underflow, potentially causing device malfunctions or crashes. It is recommended to update the Linux Kernel to a version that includes the fix to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dmaengine is a component of the Linux Kernel that provides a framework for managing DMA operations. It allows devices to transfer data directly to and from memory without involving the CPU.
The qcom: bam_dma driver is a specific implementation within dmaengine for Qualcomm platforms. It enables efficient data transfers between peripherals and memory using the BAM hardware.
Runtime PM is a mechanism in the Linux Kernel that allows devices to be powered down when they are not in use, conserving energy.
A runtime PM underflow occurs when the implementation of runtime PM in a driver has a flaw that leads to incorrect power management operations, potentially causing the device to malfunction or crash.
An attacker with local access to the system may be able to exploit this vulnerability to disrupt the normal functioning of the device or gain elevated privileges.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
