CVE-2024-50297

Severity CVSS v4.0:
Pending analysis
Type:
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
19/11/2024
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts<br /> <br /> Enqueue packets in dql after dma engine starts causes race condition.<br /> Tx transfer starts once dma engine is started and may execute dql dequeue<br /> in completion before it gets queued. It results in following kernel crash<br /> while running iperf stress test:<br /> <br /> kernel BUG at lib/dynamic_queue_limits.c:99!<br /> <br /> Internal error: Oops - BUG: 00000000f2000800 [#1] SMP<br /> pc : dql_completed+0x238/0x248<br /> lr : dql_completed+0x3c/0x248<br /> <br /> Call trace:<br /> dql_completed+0x238/0x248<br /> axienet_dma_tx_cb+0xa0/0x170<br /> xilinx_dma_do_tasklet+0xdc/0x290<br /> tasklet_action_common+0xf8/0x11c<br /> tasklet_action+0x30/0x3c<br /> handle_softirqs+0xf8/0x230<br /> <br /> <br /> Start dmaengine after enqueue in dql fixes the crash.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8 (including) 6.11.8 (excluding)
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*