CVE-2021-46920 dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback

2024-02-2706:53:57

Linux

github.com

linux kernel

vulnerability

idxd

writeback

driver

AI Score

7.3

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback

Current code blindly writes over the SWERR and the OVERFLOW bits. Write
back the bits actually read instead so the driver avoids clobbering the
OVERFLOW bit that comes after the register is read.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "bfe1d56091c1",
        "lessThan": "a5ad12d5d69c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bfe1d56091c1",
        "lessThan": "02981a44a0e4",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bfe1d56091c1",
        "lessThan": "ea941ac294d7",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/dma/idxd/irq.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "5.10.32",
        "versionType": "custom",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.11.16",
        "versionType": "custom",
        "lessThanOrEqual": "5.11.*"
      },
      {
        "status": "unaffected",
        "version": "5.12",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/dma/idxd/irq.c"
    ],
    "defaultStatus": "affected"
  }
]