Bug 2334380 (CVE-2024-53225) - CVE-2024-53225 kernel: iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift
Summary: CVE-2024-53225 kernel: iommu/tegra241-cmdqv: Fix alignment failure at max_n_s...
Keywords:
Status: NEW
Alias: CVE-2024-53225
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-12-27 14:03 UTC by OSIDB Bzimport
Modified: 2024-12-28 13:31 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-12-27 14:03:10 UTC 
In the Linux kernel, the following vulnerability has been resolved:

iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift

When configuring a kernel with PAGE_SIZE=4KB, depending on its setting of
CONFIG_CMA_ALIGNMENT, VCMDQ_LOG2SIZE_MAX=19 could fail the alignment test
and trigger a WARN_ON:
    WARNING: at drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3646
    Call trace:
     arm_smmu_init_one_queue+0x15c/0x210
     tegra241_cmdqv_init_structures+0x114/0x338
     arm_smmu_device_probe+0xb48/0x1d90

Fix it by capping max_n_shift to CMDQ_MAX_SZ_SHIFT as SMMUv3 CMDQ does.
Comment 1 Avinash Hanwate 2024-12-28 13:27:19 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024122735-CVE-2024-53225-8deb@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.