CVE-2024-27408

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled before the full write of the linked list a race condition error will occur. In remote setup we can only use a readl to the memory to assure the full write has occurred.

Moderate severity is assigned to this flaw because triggering the race condition requires local system access alongside specific hardware configurations utilizing remote DMA controllers, limiting the maximum impact to a system hang or denial of service. Default enterprise installations of Red Hat Enterprise Linux do not build or enable the Synopsys DesignWare eDMA driver, leaving standard production deployments unaffected. On platforms where this controller is actively deployed, an attacker would need local privileges to initiate DMA operations, preventing remote exploitation or unauthorized data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.