Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
Low
Attack Vector
Local
0

CVE-2024-53127

Disclosure Date: December 04, 2024
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

In the Linux kernel, the following vulnerability has been resolved:

Revert “mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K”

The commit 8396c793ffdf (“mmc: dw_mmc: Fix IDMAC operation with pages
bigger than 4K”) increased the max_req_size, even for 4K pages, causing
various issues:

  • Panic booting the kernel/rootfs from an SD card on Rockchip RK3566
  • Panic booting the kernel/rootfs from an SD card on StarFive JH7100
  • “swiotlb buffer is full” and data corruption on StarFive JH7110

At this stage no fix have been found, so it’s probably better to just
revert the change.

This reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
5.5 Medium
Impact Score:
3.6
Exploitability Score:
1.8
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High

General Information

Vendors

Products

Technical Analysis