First published: Thu Feb 29 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf uninitialized in mt76_dma_tx_queue_skb_raw, its field skip_unmap could potentially inherit a non-zero value from stack garbage. If this happens, it will cause DMA mappings for MCU command frames to not be unmapped after completion
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=5.10<5.10.37 | |
Linux Kernel | >=5.11<5.11.21 | |
Linux Kernel | >=5.12<5.12.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-47064 is classified as a medium-severity vulnerability in the Linux kernel.
CVE-2021-47064 affects Linux kernel versions between 5.10 and 5.10.37, 5.11 and 5.11.21, as well as 5.12 and 5.12.4.
To fix CVE-2021-47064, update the Linux kernel to a version that is not affected, specifically above the impacted versions.
CVE-2021-47064 is caused by an uninitialized buffer in the mt76_dma_tx_queue_skb_raw function, potentially leading to DMA mapping leaks.
There are no specific workarounds for CVE-2021-47064; updating the kernel is the recommended approach.