VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2024/53xxx/CVE-2024-53127.json
T

334 lines
17 KiB
JSON
Raw Blame History

{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2024-53127",
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"state": "PUBLISHED",
"assignerShortName": "Linux",
"dateReserved": "2024-11-19T17:17:24.995Z",
"datePublished": "2024-12-04T14:20:31.547Z",
"dateUpdated": "2026-08-05T11:43:57.321Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux",
"dateUpdated": "2026-08-05T11:43:57.321Z"
},
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it's probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890."
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH"
},
"scenarios": [
{
"lang": "en",
"value": "AV:L - The flaw is in the dw_mmc SD/eMMC host controller DMA path, reached only through local block I/O (syscalls to a mounted mmc filesystem or the block device); it is not exposed over any network protocol.\nAC:L - On the affected DesignWare-MMC platforms the corruption/panic is triggered reliably by ordinary large sequential I/O, and the boot-from-SD panics are deterministic, so no attacker-uncontrolled condition is required.\nPR:L - An unprivileged local user issuing large I/O to a mounted mmc/SD device drives the vulnerable DMA descriptor path; no elevated capability is needed.\nUI:N - The condition is reached by the attacker's own I/O (or automatically during boot); no action by another user is required.\nS:U - The DMA data corruption and crash occur within the kernel's own memory and security authority; no VM/IOMMU/sandbox boundary is crossed.\nC:H - The oversized-segment DMA path causes memory/data corruption during bounce-buffered transfers that can pull stale or adjacent memory into the transfer, a corruption primitive leverageable for information disclosure.\nI:H - The bug produces DMA data corruption (misdirected/truncated transfers) of kernel memory and stored data, an unbounded integrity impact.\nA:H - The defect causes kernel panics booting from SD card and swiotlb-exhaustion crashes, a full denial of service."
}
]
}
],
"affected": [
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/mmc/host/dw_mmc.c"
],
"versions": [
{
"version": "32bd402f6760d57127d58a9888553b2db574bba6",
"lessThan": "00bff71745bc3583bd5ca59be91e0ee1d27f1944",
"status": "affected",
"versionType": "git"
},
{
"version": "b9ee16a20d9976686185d7e59cd006c328b6a1e0",
"lessThan": "47693ba35bccaa16efa465159a1c12d78258349e",
"status": "affected",
"versionType": "git"
},
{
"version": "2793f423893579b35dc1fc24dd7c1ce58fa0345a",
"lessThan": "938c13740f8b555986e53c0fcbaf00dcd1fabd4c",
"status": "affected",
"versionType": "git"
},
{
"version": "9d715a234dd8f01af970b78ae2144a2fd3ead21c",
"lessThan": "f701eb601470bfc0a551913ce5f6ebaa770f0ce0",
"status": "affected",
"versionType": "git"
},
{
"version": "373f8f5b087f010dddae3306a79c6fdd5c2f8953",
"lessThan": "8f9416147d7ed414109d3501f1cb3d7a1735b25a",
"status": "affected",
"versionType": "git"
},
{
"version": "5b4bf3948875064a9adcda4b52b59e0520a8c576",
"lessThan": "56de724c58c07a7ca3aac027cfd2ccb184ed9e4e",
"status": "affected",
"versionType": "git"
},
{
"version": "8396c793ffdf28bb8aee7cfe0891080f8cab7890",
"lessThan": "a4685366f07448420badb710ff5c12aaaadf63ad",
"status": "affected",
"versionType": "git"
},
{
"version": "8396c793ffdf28bb8aee7cfe0891080f8cab7890",
"lessThan": "1635e407a4a64d08a8517ac59ca14ad4fc785e75",
"status": "affected",
"versionType": "git"
},
{
"version": "5b1ef10f7d49f3320b0faa894204259e590ce588",
"status": "affected",
"versionType": "git"
},
{
"version": "4.19.322",
"lessThan": "4.19.325",
"status": "affected",
"versionType": "semver"
},
{
"version": "5.4.284",
"lessThan": "5.4.287",
"status": "affected",
"versionType": "semver"
},
{
"version": "5.10.226",
"lessThan": "5.10.231",
"status": "affected",
"versionType": "semver"
},
{
"version": "5.15.167",
"lessThan": "5.15.174",
"status": "affected",
"versionType": "semver"
},
{
"version": "6.1.110",
"lessThan": "6.1.119",
"status": "affected",
"versionType": "semver"
},
{
"version": "6.6.51",
"lessThan": "6.6.63",
"status": "affected",
"versionType": "semver"
},
{
"version": "6.10.10",
"lessThan": "6.11",
"status": "affected",
"versionType": "semver"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/mmc/host/dw_mmc.c"
],
"versions": [
{
"version": "6.11",
"status": "affected"
},
{
"version": "0",
"lessThan": "6.11",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "4.19.325",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.4.287",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.10.231",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.15.174",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.1.119",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.6.63",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.11.10",
"lessThanOrEqual": "6.11.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.12",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.322",
"versionEndExcluding": "4.19.325"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.284",
"versionEndExcluding": "5.4.287"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.226",
"versionEndExcluding": "5.10.231"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.167",
"versionEndExcluding": "5.15.174"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.110",
"versionEndExcluding": "6.1.119"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.6.51",
"versionEndExcluding": "6.6.63"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.11",
"versionEndExcluding": "6.11.10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.11",
"versionEndExcluding": "6.12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10.10"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/00bff71745bc3583bd5ca59be91e0ee1d27f1944"
},
{
"url": "https://git.kernel.org/stable/c/47693ba35bccaa16efa465159a1c12d78258349e"
},
{
"url": "https://git.kernel.org/stable/c/938c13740f8b555986e53c0fcbaf00dcd1fabd4c"
},
{
"url": "https://git.kernel.org/stable/c/f701eb601470bfc0a551913ce5f6ebaa770f0ce0"
},
{
"url": "https://git.kernel.org/stable/c/8f9416147d7ed414109d3501f1cb3d7a1735b25a"
},
{
"url": "https://git.kernel.org/stable/c/56de724c58c07a7ca3aac027cfd2ccb184ed9e4e"
},
{
"url": "https://git.kernel.org/stable/c/a4685366f07448420badb710ff5c12aaaadf63ad"
},
{
"url": "https://git.kernel.org/stable/c/1635e407a4a64d08a8517ac59ca14ad4fc785e75"
}
],
"title": "Revert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"",
"x_generator": {
"engine": "bippy-1.2.0"
}
},
"adp": [
{
"title": "CVE Program Container",
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
}
],
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2025-11-03T22:29:31.953Z"
}
}
]
}
}
View Git Blame Copy Permalink