CVE-2024-40986: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: xilinx: xdma: Fix data synchronisation in xdmachannelisr()
Requests the vchan lock before using xdma->stoprequest.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40986?
CVE-2024-40986 is considered a medium severity vulnerability due to its potential impact on the data synchronisation process within the Linux kernel.
How do I fix CVE-2024-40986?
To fix CVE-2024-40986, update the Linux kernel to a version that includes the patch, such as 5.10.226-1, 6.1.123-1, or later versions.
Which Linux kernel versions are affected by CVE-2024-40986?
CVE-2024-40986 affects multiple Linux kernel versions, including 5.10.223-1, 5.10.226-1, 6.1.119-1, and several others.
What components are impacted by CVE-2024-40986?
CVE-2024-40986 primarily impacts the dmaengine component of the Linux kernel, specifically regarding xdma channel operations.
Is CVE-2024-40986 a remote or local vulnerability?
CVE-2024-40986 is considered a local vulnerability, as it requires local access to the system for exploitation.