CVE-2024-57805 (GCVE-0-2024-57805)
Vulnerability from cvelistv5
Published
2025-01-11 12:39
Modified
2025-05-04 13:01
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to 'steal' the linkDMA since it has been released. This issue is not easy to reproduce under normal conditions as usually after stop the stream is closed, or the same stream is restarted, but if another stream got in between the stop and start, like this: aplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120 CTRL+z aplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120 then the link DMA channels will be mixed up, resulting firmware error or crash.
References
Impacted products
Vendor Product Version
Linux Linux Version: ab5593793e9088abcddce30ba8e376e31b7285fd
Version: ab5593793e9088abcddce30ba8e376e31b7285fd
Version: ec0c7735dd014e54e55bc3bf4ed2e73d56bb00b3
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/soc/sof/intel/hda-dai.c",
            "sound/soc/sof/intel/hda.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "909ecf15cb70f78cdb5c930f58df01db039a0ff8",
              "status": "affected",
              "version": "ab5593793e9088abcddce30ba8e376e31b7285fd",
              "versionType": "git"
            },
            {
              "lessThan": "e8d0ba147d901022bcb69da8d8fd817f84e9f3ca",
              "status": "affected",
              "version": "ab5593793e9088abcddce30ba8e376e31b7285fd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ec0c7735dd014e54e55bc3bf4ed2e73d56bb00b3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/soc/sof/intel/hda-dai.c",
            "sound/soc/sof/intel/hda.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "lessThan": "6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.8",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.11.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP\n\nThe linkDMA should not be released on stop trigger since a stream re-start\nmight happen without closing of the stream. This leaves a short time for\nother streams to \u0027steal\u0027 the linkDMA since it has been released.\n\nThis issue is not easy to reproduce under normal conditions as usually\nafter stop the stream is closed, or the same stream is restarted, but if\nanother stream got in between the stop and start, like this:\naplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120\nCTRL+z\naplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120\n\nthen the link DMA channels will be mixed up, resulting firmware error or\ncrash."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T13:01:25.275Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/909ecf15cb70f78cdb5c930f58df01db039a0ff8"
        },
        {
          "url": "https://git.kernel.org/stable/c/e8d0ba147d901022bcb69da8d8fd817f84e9f3ca"
        }
      ],
      "title": "ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-57805",
    "datePublished": "2025-01-11T12:39:51.798Z",
    "dateReserved": "2025-01-11T12:32:49.459Z",
    "dateUpdated": "2025-05-04T13:01:25.275Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-57805\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-11T13:15:30.420\",\"lastModified\":\"2025-01-11T13:15:30.420\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP\\n\\nThe linkDMA should not be released on stop trigger since a stream re-start\\nmight happen without closing of the stream. This leaves a short time for\\nother streams to \u0027steal\u0027 the linkDMA since it has been released.\\n\\nThis issue is not easy to reproduce under normal conditions as usually\\nafter stop the stream is closed, or the same stream is restarted, but if\\nanother stream got in between the stop and start, like this:\\naplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120\\nCTRL+z\\naplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120\\n\\nthen the link DMA channels will be mixed up, resulting firmware error or\\ncrash.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: SOF: Intel: hda-dai: No libere el enlace DMA en STOP El linkDMA no debe liberarse en el disparador de detenci\u00f3n ya que podr\u00eda ocurrir un reinicio de transmisi\u00f3n sin cerrar la transmisi\u00f3n. Esto deja un corto tiempo para que otras transmisiones \\\"roben\\\" el linkDMA desde que se ha liberado. Este problema no es f\u00e1cil de reproducir en condiciones normales ya que generalmente despu\u00e9s de detener la transmisi\u00f3n se cierra, o se reinicia la misma transmisi\u00f3n, pero si otra transmisi\u00f3n se interpuso entre la detenci\u00f3n y el inicio, como esto: aplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120 CTRL+z aplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120 entonces los canales de enlace DMA se mezclar\u00e1n, lo que provocar\u00e1 un error o bloqueo del firmware.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/909ecf15cb70f78cdb5c930f58df01db039a0ff8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e8d0ba147d901022bcb69da8d8fd817f84e9f3ca\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.