CVE-2024-47667

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47667
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang. The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here. The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed. [1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 Patch
https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 Patch
https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa Patch
https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 Patch
https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 Patch
https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a Patch
https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Oct 2024, 16:31

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 - () https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 - Patch
References () https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 - () https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 - Patch
References () https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa - () https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa - Patch
References () https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 - () https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 - Patch
References () https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 - () https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 - Patch
References () https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a - () https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a - Patch
References () https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 - () https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 - Patch

10 Oct 2024, 12:51

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: keystone: Agregar workaround para Errata #i2037 (AM65x SR 1.0) Errata #i2037 en procesadores AM65x/DRA80xM Silicon Revision 1.0 (SPRZ452D_julio de 2018_revisado en diciembre de 2019 [1]) menciona que cuando un TLP PCIe entrante abarca más de dos ráfagas internas AXI de 128 bytes, el bus puede dañar el payload del paquete y los datos dañados pueden hacer que las aplicaciones asociadas o el procesador se cuelguen. El workaround para Errata #i2037 es limitar el tamaño máximo de solicitud de lectura y el tamaño máximo de payloas a 128 bytes. Agregar workaround para Errata #i2037 aquí. La errata y el workaround a son aplicables solo a AM65x SR 1.0 y las versiones posteriores del silicio tendrán esto corregido. [1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf

09 Oct 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-09 15:15

Updated : 2024-10-23 16:31

NVD link : CVE-2024-47667

Mitre link : CVE-2024-47667

CVE.ORG link : CVE-2024-47667

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo