{"id":"CVE-2024-53127","state":"PUBLISHED","title":"Revert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it's probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.","publishedAt":"2024-12-04T14:20:31.547Z","updatedAt":"2026-08-05T11:43:57.321Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"Linux"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"32bd402f6760d57127d58a9888553b2db574bba6","status":"affected","lessThan":"00bff71745bc3583bd5ca59be91e0ee1d27f1944","versionType":"git"},{"version":"b9ee16a20d9976686185d7e59cd006c328b6a1e0","status":"affected","lessThan":"47693ba35bccaa16efa465159a1c12d78258349e","versionType":"git"},{"version":"2793f423893579b35dc1fc24dd7c1ce58fa0345a","status":"affected","lessThan":"938c13740f8b555986e53c0fcbaf00dcd1fabd4c","versionType":"git"},{"version":"9d715a234dd8f01af970b78ae2144a2fd3ead21c","status":"affected","lessThan":"f701eb601470bfc0a551913ce5f6ebaa770f0ce0","versionType":"git"},{"version":"373f8f5b087f010dddae3306a79c6fdd5c2f8953","status":"affected","lessThan":"8f9416147d7ed414109d3501f1cb3d7a1735b25a","versionType":"git"},{"version":"5b4bf3948875064a9adcda4b52b59e0520a8c576","status":"affected","lessThan":"56de724c58c07a7ca3aac027cfd2ccb184ed9e4e","versionType":"git"},{"version":"8396c793ffdf28bb8aee7cfe0891080f8cab7890","status":"affected","lessThan":"a4685366f07448420badb710ff5c12aaaadf63ad","versionType":"git"},{"version":"8396c793ffdf28bb8aee7cfe0891080f8cab7890","status":"affected","lessThan":"1635e407a4a64d08a8517ac59ca14ad4fc785e75","versionType":"git"},{"version":"5b1ef10f7d49f3320b0faa894204259e590ce588","status":"affected","versionType":"git"},{"version":"4.19.322","status":"affected","lessThan":"4.19.325","versionType":"semver"},{"version":"5.4.284","status":"affected","lessThan":"5.4.287","versionType":"semver"},{"version":"5.10.226","status":"affected","lessThan":"5.10.231","versionType":"semver"},{"version":"5.15.167","status":"affected","lessThan":"5.15.174","versionType":"semver"},{"version":"6.1.110","status":"affected","lessThan":"6.1.119","versionType":"semver"},{"version":"6.6.51","status":"affected","lessThan":"6.6.63","versionType":"semver"},{"version":"6.10.10","status":"affected","lessThan":"6.11","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/dw_mmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.11","versionType":"semver"},{"version":"4.19.325","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.287","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.231","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.174","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.119","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.63","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.10","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/dw_mmc.c"]}],"references":["https://git.kernel.org/stable/c/00bff71745bc3583bd5ca59be91e0ee1d27f1944","https://git.kernel.org/stable/c/47693ba35bccaa16efa465159a1c12d78258349e","https://git.kernel.org/stable/c/938c13740f8b555986e53c0fcbaf00dcd1fabd4c","https://git.kernel.org/stable/c/f701eb601470bfc0a551913ce5f6ebaa770f0ce0","https://git.kernel.org/stable/c/8f9416147d7ed414109d3501f1cb3d7a1735b25a","https://git.kernel.org/stable/c/56de724c58c07a7ca3aac027cfd2ccb184ed9e4e","https://git.kernel.org/stable/c/a4685366f07448420badb710ff5c12aaaadf63ad","https://git.kernel.org/stable/c/1635e407a4a64d08a8517ac59ca14ad4fc785e75","https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html","https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/53xxx/CVE-2024-53127.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-53127","state":"PUBLISHED","datePublished":"2024-12-04T14:20:31.547Z","dateUpdated":"2026-08-05T11:43:57.321Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-11-19T17:17:24.995Z"},"containers":{"cna":{"title":"Revert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it's probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"32bd402f6760d57127d58a9888553b2db574bba6","status":"affected","lessThan":"00bff71745bc3583bd5ca59be91e0ee1d27f1944","versionType":"git"},{"version":"b9ee16a20d9976686185d7e59cd006c328b6a1e0","status":"affected","lessThan":"47693ba35bccaa16efa465159a1c12d78258349e","versionType":"git"},{"version":"2793f423893579b35dc1fc24dd7c1ce58fa0345a","status":"affected","lessThan":"938c13740f8b555986e53c0fcbaf00dcd1fabd4c","versionType":"git"},{"version":"9d715a234dd8f01af970b78ae2144a2fd3ead21c","status":"affected","lessThan":"f701eb601470bfc0a551913ce5f6ebaa770f0ce0","versionType":"git"},{"version":"373f8f5b087f010dddae3306a79c6fdd5c2f8953","status":"affected","lessThan":"8f9416147d7ed414109d3501f1cb3d7a1735b25a","versionType":"git"},{"version":"5b4bf3948875064a9adcda4b52b59e0520a8c576","status":"affected","lessThan":"56de724c58c07a7ca3aac027cfd2ccb184ed9e4e","versionType":"git"},{"version":"8396c793ffdf28bb8aee7cfe0891080f8cab7890","status":"affected","lessThan":"a4685366f07448420badb710ff5c12aaaadf63ad","versionType":"git"},{"version":"8396c793ffdf28bb8aee7cfe0891080f8cab7890","status":"affected","lessThan":"1635e407a4a64d08a8517ac59ca14ad4fc785e75","versionType":"git"},{"version":"5b1ef10f7d49f3320b0faa894204259e590ce588","status":"affected","versionType":"git"},{"version":"4.19.322","status":"affected","lessThan":"4.19.325","versionType":"semver"},{"version":"5.4.284","status":"affected","lessThan":"5.4.287","versionType":"semver"},{"version":"5.10.226","status":"affected","lessThan":"5.10.231","versionType":"semver"},{"version":"5.15.167","status":"affected","lessThan":"5.15.174","versionType":"semver"},{"version":"6.1.110","status":"affected","lessThan":"6.1.119","versionType":"semver"},{"version":"6.6.51","status":"affected","lessThan":"6.6.63","versionType":"semver"},{"version":"6.10.10","status":"affected","lessThan":"6.11","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/dw_mmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.11","versionType":"semver"},{"version":"4.19.325","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.287","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.231","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.174","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.119","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.63","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.10","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/dw_mmc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/00bff71745bc3583bd5ca59be91e0ee1d27f1944"},{"url":"https://git.kernel.org/stable/c/47693ba35bccaa16efa465159a1c12d78258349e"},{"url":"https://git.kernel.org/stable/c/938c13740f8b555986e53c0fcbaf00dcd1fabd4c"},{"url":"https://git.kernel.org/stable/c/f701eb601470bfc0a551913ce5f6ebaa770f0ce0"},{"url":"https://git.kernel.org/stable/c/8f9416147d7ed414109d3501f1cb3d7a1735b25a"},{"url":"https://git.kernel.org/stable/c/56de724c58c07a7ca3aac027cfd2ccb184ed9e4e"},{"url":"https://git.kernel.org/stable/c/a4685366f07448420badb710ff5c12aaaadf63ad"},{"url":"https://git.kernel.org/stable/c/1635e407a4a64d08a8517ac59ca14ad4fc785e75"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"},"scenarios":[{"lang":"en","value":"AV:L - The flaw is in the dw_mmc SD/eMMC host controller DMA path, reached only through local block I/O (syscalls to a mounted mmc filesystem or the block device); it is not exposed over any network protocol.\nAC:L - On the affected DesignWare-MMC platforms the corruption/panic is triggered reliably by ordinary large sequential I/O, and the boot-from-SD panics are deterministic, so no attacker-uncontrolled condition is required.\nPR:L - An unprivileged local user issuing large I/O to a mounted mmc/SD device drives the vulnerable DMA descriptor path; no elevated capability is needed.\nUI:N - The condition is reached by the attacker's own I/O (or automatically during boot); no action by another user is required.\nS:U - The DMA data corruption and crash occur within the kernel's own memory and security authority; no VM/IOMMU/sandbox boundary is crossed.\nC:H - The oversized-segment DMA path causes memory/data corruption during bounce-buffered transfers that can pull stale or adjacent memory into the transfer, a corruption primitive leverageable for information disclosure.\nI:H - The bug produces DMA data corruption (misdirected/truncated transfers) of kernel memory and stored data, an unbounded integrity impact.\nA:H - The defect causes kernel panics booting from SD card and swiotlb-exhaustion crashes, a full denial of service."}]}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-05T11:43:57.321Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.322","versionEndExcluding":"4.19.325"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.284","versionEndExcluding":"5.4.287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.226","versionEndExcluding":"5.10.231"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.167","versionEndExcluding":"5.15.174"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.110","versionEndExcluding":"6.1.119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.51","versionEndExcluding":"6.6.63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.11.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.10.10"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T22:29:31.953Z"}}]}}}