Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() waits for the DMA completion callback but ignores wait_for_completion_timeout(). A timed out DMA transfer is therefore unmapped and reported as successful to the NAND read/write path. Return -ETIMEDOUT when the completion wait expires. Terminate the DMA channel before unmapping the scatterlist so the timed out transfer cannot continue to access the buffer after the error is returned.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2944a44da09e46b6db2fd2c3334f242b09e05c43 to < 307e4f4c1d4e1575b3495ecc6e41aa2adc40f491affected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < c367af37ce7238c96c6071337149099467160746affected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < 623c4d8e740debb4af28981e3d4e209f9d0260a4affected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < bd4a622786f92e1f183f7557ab89dd32891cef60affected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < 8f5c3ee53a5dc1a0f7cfd780485f2c8b5d17f91daffected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < cf7258f57d18026b8f77c0e80ff1805e9caf7250affected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < cb2031f8b226efbd13735c07b075e5f14ec11f6daffected2944a44da09e46b6db2fd2c3334f242b09e05c43 to < 17a8ce84964f243c8f89dc7353ac7e8d3137bc74affected
Linux Linux
Default version status: affected
3.7affected0 to < 3.7unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/307e4f4c1d4e1575b3495ecc6e41aa2adc40f491 ↗
- https://git.kernel.org/stable/c/c367af37ce7238c96c6071337149099467160746 ↗
- https://git.kernel.org/stable/c/623c4d8e740debb4af28981e3d4e209f9d0260a4 ↗
- https://git.kernel.org/stable/c/bd4a622786f92e1f183f7557ab89dd32891cef60 ↗
- https://git.kernel.org/stable/c/8f5c3ee53a5dc1a0f7cfd780485f2c8b5d17f91d ↗
- https://git.kernel.org/stable/c/cf7258f57d18026b8f77c0e80ff1805e9caf7250 ↗
- https://git.kernel.org/stable/c/cb2031f8b226efbd13735c07b075e5f14ec11f6d ↗
- https://git.kernel.org/stable/c/17a8ce84964f243c8f89dc7353ac7e8d3137bc74 ↗