PT-2024-7740 · Linux+5 · Linux Kernel+5

Published

2024-02-14

·

Updated

2025-03-20

·

CVE-2024-26787

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.28
Description The vulnerability is related to the Linux kernel's DMA API, specifically the dma map sg and dma unmap sg functions, which are not correctly balanced. This can lead to leaking dma-mappings, causing overlapping mappings to occur. The issue is triggered when the CONFIG DMA API DEBUG SG option is enabled, resulting in a warning message. The vulnerability can potentially allow an attacker to access confidential information.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the DMA API overlapping mappings warning. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-09208
CVE-2024-26787
DLA-3842-1
DSA-5658-1
DSA-5681-1
OESA-2024-1622
OESA-2024-1647
OESA-2024-1648
OESA-2024-1681
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6871-1
USN-6892-1
USN-6919-1
USN-7022-1
USN-7022-2
USN-7022-3
USN-7119-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu