CVE-2024-50295

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50295
In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent which has dma_mask, ndev->dev.parent is just pdev->dev. Or it would cause the following issue: [ 39.933526] ------------[ cut here ]------------ [ 39.938414] WARNING: CPU: 1 PID: 501 at kernel/dma/mapping.c:149 dma_map_page_attrs+0x90/0x1f8

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/30606ea3fae57f8e9f2467415389e988e3c53a18 Patch
https://git.kernel.org/stable/c/3898393b5483c8aa2efd7cb13aa70e22078ab022 Patch
https://git.kernel.org/stable/c/71803c1dfa29e0d13b99e48fda11107cc8caebc7 Patch
https://git.kernel.org/stable/c/8ed7a4a39c3f7cd9655af867e878fda512ae67ad Patch
https://git.kernel.org/stable/c/cd4706d9ac0d8d3bab8dc9e50cc1187f6cfa43dd Patch
https://git.kernel.org/stable/c/fd4e062fbc07156f8e9d73212d347c744572677e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
History

08 Oct 2025, 15:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/30606ea3fae57f8e9f2467415389e988e3c53a18 - () https://git.kernel.org/stable/c/30606ea3fae57f8e9f2467415389e988e3c53a18 - Patch
References () https://git.kernel.org/stable/c/3898393b5483c8aa2efd7cb13aa70e22078ab022 - () https://git.kernel.org/stable/c/3898393b5483c8aa2efd7cb13aa70e22078ab022 - Patch
References () https://git.kernel.org/stable/c/71803c1dfa29e0d13b99e48fda11107cc8caebc7 - () https://git.kernel.org/stable/c/71803c1dfa29e0d13b99e48fda11107cc8caebc7 - Patch
References () https://git.kernel.org/stable/c/8ed7a4a39c3f7cd9655af867e878fda512ae67ad - () https://git.kernel.org/stable/c/8ed7a4a39c3f7cd9655af867e878fda512ae67ad - Patch
References () https://git.kernel.org/stable/c/cd4706d9ac0d8d3bab8dc9e50cc1187f6cfa43dd - () https://git.kernel.org/stable/c/cd4706d9ac0d8d3bab8dc9e50cc1187f6cfa43dd - Patch
References () https://git.kernel.org/stable/c/fd4e062fbc07156f8e9d73212d347c744572677e - () https://git.kernel.org/stable/c/fd4e062fbc07156f8e9d73212d347c744572677e - Patch
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
CWE NVD-CWE-noinfo

19 Nov 2024, 21:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: arc: reparar el dispositivo para dma_map_single/dma_unmap_single ndev->dev y pdev->dev no son el mismo dispositivo, use ndev->dev.parent que tiene dma_mask, ndev->dev.parent es simplemente pdev->dev. O causaría el siguiente problema: [ 39.933526] ------------[ cortar aquí ]------------ [ 39.938414] ADVERTENCIA: CPU: 1 PID: 501 en kernel/dma/mapping.c:149 dma_map_page_attrs+0x90/0x1f8

19 Nov 2024, 02:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 02:16

Updated : 2025-10-08 15:02

NVD link : CVE-2024-50295

Mitre link : CVE-2024-50295

CVE.ORG link : CVE-2024-50295

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo