CVE-2021-46918 dmaengine: idxd: clear MSIX permission entry on shutdown

2024-02-2706:53:56

Linux

github.com

linux kernel

vulnerability

dmaengine

idxd

msix permission

shutdown

pasid entries

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: clear MSIX permission entry on shutdown

Add disabling/clearing of MSIX permission entries on device shutdown to
mirror the enabling of the MSIX entries on probe. Current code left the
MSIX enabled and the pasid entries still programmed at device shutdown.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "8e50d392652f",
        "lessThan": "c84b8982d7aa",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "8e50d392652f",
        "lessThan": "6df0e6c57dfc",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/dma/idxd/device.c",
      "drivers/dma/idxd/idxd.h",
      "drivers/dma/idxd/init.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.11"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.11",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "5.11.16",
        "versionType": "custom",
        "lessThanOrEqual": "5.11.*"
      },
      {
        "status": "unaffected",
        "version": "5.12",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/dma/idxd/device.c",
      "drivers/dma/idxd/idxd.h",
      "drivers/dma/idxd/init.c"
    ],
    "defaultStatus": "affected"
  }
]