Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lorenzo Pieralisi

Researcher fromARM
#46519of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-11237
5.5
2021-06-18
Linux · Linux Kernel · CVE-2021-47229
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the PCI: aardvark component in the Linux kernel, where starting a new PIO transfer by writing value 0 in the PIO START register when the previous transfer has not yet completed causes an External Abort on the CPU, resulting in a kernel panic. This happens because the kernel may issue a new PIO request while the previous one has not finished, especially during link retraining or after a link down event, which can take up to 1.44 seconds to time out. To prevent kernel panic, it is required to reject a new PIO transfer when the previous one has not finished yet. The kernel may issue a new PIO request only if the previous PIO transfer timed out. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.