CVE-2024-53058

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data

In case the non-paged data of a SKB carries protocol header and protocol

payload to be transmitted on a certain platform that the DMA AXI address

width is configured to 40-bit/48-bit, or the size of the non-paged data

is bigger than TSO_MAX_BUFF_SIZE on a certain platform that the DMA AXI

address width is configured to 32-bit, then this SKB requires at least

two DMA transmit descriptors to serve it.

For example, three descriptors are allocated to split one DMA buffer

mapped from one piece of non-paged data:

dma_desc[N + 0],

dma_desc[N + 1],

dma_desc[N + 2].

Then three elements of tx_q->tx_skbuff_dma[] will be allocated to hold

extra information to be reused in stmmac_tx_clean():

tx_q->tx_skbuff_dma[N + 0],

tx_q->tx_skbuff_dma[N + 1],

tx_q->tx_skbuff_dma[N + 2].

Now we focus on tx_q->tx_skbuff_dma[entry].buf, which is the DM

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References