CVE-2024-47667: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
In the Linux kernel, the following vulnerability has been resolved:
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452DJuly 2018Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang.
The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here.
The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed.
[1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Apply the workaround for Errata #i2037 on AM65x silicon revision 1.0 by limiting the maximum read request size and maximum payload size to 128 bytes, since inbound PCIe TLPs spanning more than two internal AXI 128-byte bursts may corrupt payload data and cause applications or the processor to hang.
Linux kernel PCI keystone (AM65x/DRA80xM PCIe) limit maximum read request size and maximum payload size to 128 bytes = 128 bytes
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47667?
CVE-2024-47667 has been categorized as a medium-severity vulnerability affecting specific versions of the Linux kernel.
How do I fix CVE-2024-47667?
To fix CVE-2024-47667, update to the fixed versions of the Linux kernel as specified in the remediation details.
Which versions of the Linux kernel are affected by CVE-2024-47667?
CVE-2024-47667 affects Linux kernel versions older than 6.1.123-1 and specific ranges up to 5.10.226.
What platforms are impacted by CVE-2024-47667?
CVE-2024-47667 primarily impacts systems utilizing AM65x/DRA80xM Processors Silicon Revision 1.0 via the PCI interface.
Is there a workaround for CVE-2024-47667?
Yes, a workaround has been implemented in the Linux kernel to address the issues caused by CVE-2024-47667.