First published: Tue Nov 19 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent which has dma_mask, ndev->dev.parent is just pdev->dev. Or it would cause the following issue: [ 39.933526] ------------[ cut here ]------------ [ 39.938414] WARNING: CPU: 1 PID: 501 at kernel/dma/mapping.c:149 dma_map_page_attrs+0x90/0x1f8
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
debian/linux | <=5.10.223-1<=5.10.226-1 | 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 |
debian/linux-6.1 | 6.1.119-1~deb11u1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2024-50295 is considered moderate due to potential impacts on device functionality.
To fix CVE-2024-50295, you should upgrade the Linux packages to the recommended versions: 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
Vulnerable versions of Linux include those up to and including 5.10.226-1.
Yes, patches have been released in the newer versions of the Linux kernel addressing CVE-2024-50295.
CVE-2024-50295 affects the net subsystem in the Linux kernel specifically related to device mapping.