logo_clicknbuy.png

CVE-2024-57800 – ALSA DMA API Error Handling Vulnerability

The following table lists the changes that have been made to the
CVE-2024-57800 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 11, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    ALSA: memalloc: prefer dma_mapping_error() over explicit address checking

    With CONFIG_DMA_API_DEBUG enabled, the following warning is observed:

    DMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device address=0x00000000ffff0000] [size=20480 bytes] [mapped as single]
    WARNING: CPU: 28 PID: 2255 at kernel/dma/debug.c:1036 check_unmap+0x1408/0x2430
    CPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G W L 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759
    debug_dma_unmap_page+0xe9/0xf0
    snd_dma_wc_free+0x85/0x130 [snd_pcm]
    snd_pcm_lib_free_pages+0x1e3/0x440 [snd_pcm]
    snd_pcm_common_ioctl+0x1c9a/0x2960 [snd_pcm]
    snd_pcm_ioctl+0x6a/0xc0 [snd_pcm]
    …

    Check for returned DMA addresses using specialized dma_mapping_error()
    helper which is generally recommended for this purpose by
    Documentation/core-api/dma-api.rst.
    Added Reference https://git.kernel.org/stable/c/c180c3f42d340e8dcb9094bb8ea7d477d37081a8
    Added Reference https://git.kernel.org/stable/c/fa0308134d26dbbeb209a1581eea46df663866b6
Share the Post:

Related Posts