PT-2024-35593 · Linux+7 · Linux Kernel+7
Aurelien Jarno
+1
·
Published
2024-11-10
·
Updated
2025-10-03
·
CVE-2024-53127
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.65
Description
The issue is related to a commit in the Linux kernel that increased the max req size, even for 4K pages, causing various problems. These issues include panic booting the kernel/rootfs from an SD card on Rockchip RK3566 and StarFive JH7100, as well as "swiotlb buffer is full" and data corruption on StarFive JH7110. The commit in question is 8396c793ffdf, which attempted to fix IDMAC operation with pages bigger than 4K but introduced these new issues. At this stage, no fix has been found, so the change has been reverted.
Recommendations
For Linux kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue. As a temporary workaround, consider reverting the commit 8396c793ffdf to prevent the issues caused by the increased max req size. Restrict access to SD cards on affected devices, such as Rockchip RK3566 and StarFive JH7100, to minimize the risk of panic booting or data corruption. Avoid using the
mmc: dw mmc module until the issue is resolved.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu