crypto: cavium/cpt - fix DMA cleanup using wrong loop index
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg_cleanup error path used list[i] instead of list[j] when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 23c6174e48f66fc10b998b0acdb406cb0caf5c80; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 23d3a7e896a1fe2d7a6bcb42f093948b79f8a198; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 28141f95ae93b18f9bfde953cb787fcb151fb9da; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 8afd1007ef79898a6e010eaade97097e49405fce; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 3b8a1e1f4e4071a62b20374028744e8cc8310d48; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in fb4d57b83356d4bd411b45ede3024e0ff42c9b5e; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in d319b83b97b3585550d9ae592dfa78c755b6129e; From c694b233295b99c33dd5ac28aede9f171f5a6862 · fixed in 9dbf173bd32d5f81b005008b682bfb50aa093455
- Linux Linux
4.11
- KernelLinux
From 4.11.0 · fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5
References 8
git.kernel.org
- stable/c/23c6174e48f66fc10b998b0acdb406cb0caf5c80
- stable/c/23d3a7e896a1fe2d7a6bcb42f093948b79f8a198
- stable/c/28141f95ae93b18f9bfde953cb787fcb151fb9da
- stable/c/8afd1007ef79898a6e010eaade97097e49405fce
- stable/c/3b8a1e1f4e4071a62b20374028744e8cc8310d48
- stable/c/fb4d57b83356d4bd411b45ede3024e0ff42c9b5e
- stable/c/d319b83b97b3585550d9ae592dfa78c755b6129e
- stable/c/9dbf173bd32d5f81b005008b682bfb50aa093455