CVE-2024-50295

net: arc: fix the device for dma_map_single/dma_unmap_single

MEDIUM
5.5
CVSS Score
Published: November 19, 2024 at 01:30 AM UTC
Updated: June 17, 2026 at 08:04 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent which has dma_mask, ndev->dev.parent is just pdev->dev. Or it would cause the following issue: [ 39.933526] ------------[ cut here ]------------ [ 39.938414] WARNING: CPU: 1 PID: 501 at kernel/dma/mapping.c:149 dma_map_page_attrs+0x90/0x1f8

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 5.9.25.10 ≤ v < 5.10.2305.10 ≤ v < 5.15.1725.10 ≤ v < 6.1.1175.10 ≤ v < 6.11.85.10 ≤ v < 6.125.10 ≤ v < 6.6.615.11 ≤ v < 5.15.1725.16 ≤ v < 6.1.1175.9.2 ≤ v < 5.105.9.2 ≤ v < 5.10.2306.2 ≤ v < 6.6.616.7 ≤ v < 6.11.84e57482e8440fac7137832629109730ea4b267aa5.105.9.26.12 rc16.12 rc26.12 rc36.12 rc46.12 rc56.12 rc6f959dcd6ddfd29235030e8026471ac1b022ad2b0
Vendor states this is fixed in 30606ea3fae57f8e9f2467415389e988e3c53a18 (fixed)
Vendor states this is fixed in 3898393b5483c8aa2efd7cb13aa70e22078ab022 (fixed)
Vendor states this is fixed in 71803c1dfa29e0d13b99e48fda11107cc8caebc7 (fixed)
Vendor states this is fixed in 8ed7a4a39c3f7cd9655af867e878fda512ae67ad (fixed)
Vendor states this is fixed in cd4706d9ac0d8d3bab8dc9e50cc1187f6cfa43dd (fixed)
Vendor states this is fixed in fd4e062fbc07156f8e9d73212d347c744572677e (fixed)
Vendor states this is fixed in 5.10 (unaffected)
Vendor states this is fixed in 5.10.230 (unaffected)
Vendor states this is fixed in 5.15.172 (unaffected)
Vendor states this is fixed in 6.1.117 (unaffected)
Vendor states this is fixed in 6.11.8 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.6.61 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/30606ea3fae57f8e9f2467415389e988e3c53a18
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3898393b5483c8aa2efd7cb13aa70e22078ab022
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/71803c1dfa29e0d13b99e48fda11107cc8caebc7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8ed7a4a39c3f7cd9655af867e878fda512ae67ad
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/cd4706d9ac0d8d3bab8dc9e50cc1187f6cfa43dd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fd4e062fbc07156f8e9d73212d347c744572677e
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card