CVE-2023-52511
published 2024-03-02CVE-2023-52511: In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has…
PriorityP424medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.80%
53.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
spi: sun6i: reduce DMA RX transfer width to single byte
Through empirical testing it has been determined that sometimes RX SPI
transfers with DMA enabled return corrupted data. This is down to single
or even multiple bytes lost during DMA transfer from SPI peripheral to
memory. It seems the RX FIFO within the SPI peripheral can become
confused when performing bus read accesses wider than a single byte to it
during an active SPI transfer.
This patch reduces the width of individual DMA read accesses to the
RX FIFO to a single byte to mitigate that issue.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 345980a3a5e5e1c99fc621e2ce878fb150ad2287 < ff05ed4ae214011464a0156f05cac1b0b46b5fbc | ff05ed4ae214011464a0156f05cac1b0b46b5fbc |
| linux | linux | >= 345980a3a5e5e1c99fc621e2ce878fb150ad2287 < e15bb292b24630ee832bfc7fd616bd72c7682bbb | e15bb292b24630ee832bfc7fd616bd72c7682bbb |
| linux | linux | >= 345980a3a5e5e1c99fc621e2ce878fb150ad2287 < b3c21c9c7289692f4019f163c3b06d8bdf78b355 | b3c21c9c7289692f4019f163c3b06d8bdf78b355 |
| linux | linux | >= 345980a3a5e5e1c99fc621e2ce878fb150ad2287 < 171f8a49f212e87a8b04087568e1b3d132e36a18 | 171f8a49f212e87a8b04087568e1b3d132e36a18 |
| linux | linux_kernel | < 5.15.134 | 5.15.134 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 5.16 < 6.1.56 | 6.1.56 |
| linux | linux_kernel | >= 6.2 < 6.5.6 | 6.5.6 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
osv5.3MEDIUM
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: spi: sun6i: reduce DMA RX transfer width to single byte
vendor_redhat·2024-03-02·CVSS 5.3
CVE-2023-52511 [MEDIUM] CWE-20 kernel: spi: sun6i: reduce DMA RX transfer width to single byte
kernel: spi: sun6i: reduce DMA RX transfer width to single byte
In the Linux kernel, the following vulnerability has been resolved:
spi: sun6i: reduce DMA RX transfer width to single byte
Through empirical testing it has been determined that sometimes RX SPI
transfers with DMA enabled return corrupted data. This is down to single
or even multiple bytes lost during DMA transfer from SPI peripheral to
memory. It seems the RX FIFO within the SPI peripheral can become
confused when performing bus read accesses wider than a single byte to it
during an active SPI transfer.
This patch reduces the width of individual DMA read accesses to the
RX FIFO to a single byte to mitigate that issue.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) -
Debian
CVE-2023-52511: linux - In the Linux kernel, the following vulnerability has been resolved: spi: sun6i:...
vendor_debian·2023·CVSS 5.3
CVE-2023-52511 [MEDIUM] CVE-2023-52511: linux - In the Linux kernel, the following vulnerability has been resolved: spi: sun6i:...
In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has been determined that sometimes RX SPI transfers with DMA enabled return corrupted data. This is down to single or even multiple bytes lost during DMA transfer from SPI peripheral to memory. It seems the RX FIFO within the SPI peripheral can become confused when performing bus read accesses wider than a single byte to it during an active SPI transfer. This patch reduces the width of individual DMA read accesses to the RX FIFO to a single byte to mitigate that issue.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1
GHSA
GHSA-9prw-2r97-97f6: In the Linux kernel, the following vulnerability has been resolved:
spi: sun6i: reduce DMA RX transfer width to single byte
Through empirical testin
ghsa_unreviewed·2024-03-03
CVE-2023-52511 [MEDIUM] GHSA-9prw-2r97-97f6: In the Linux kernel, the following vulnerability has been resolved:
spi: sun6i: reduce DMA RX transfer width to single byte
Through empirical testin
In the Linux kernel, the following vulnerability has been resolved:
spi: sun6i: reduce DMA RX transfer width to single byte
Through empirical testing it has been determined that sometimes RX SPI
transfers with DMA enabled return corrupted data. This is down to single
or even multiple bytes lost during DMA transfer from SPI peripheral to
memory. It seems the RX FIFO within the SPI peripheral can become
confused when performing bus read accesses wider than a single byte to it
during an active SPI transfer.
This patch reduces the width of individual DMA read accesses to the
RX FIFO to a single byte to mitigate that issue.
OSV
CVE-2023-52511: In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing
osv·2024-03-02·CVSS 5.3
CVE-2023-52511 [MEDIUM] CVE-2023-52511: In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing
In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has been determined that sometimes RX SPI transfers with DMA enabled return corrupted data. This is down to single or even multiple bytes lost during DMA transfer from SPI peripheral to memory. It seems the RX FIFO within the SPI peripheral can become confused when performing bus read accesses wider than a single byte to it during an active SPI transfer. This patch reduces the width of individual DMA read accesses to the RX FIFO to a single byte to mitigate that issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/171f8a49f212e87a8b04087568e1b3d132e36a18https://git.kernel.org/stable/c/b3c21c9c7289692f4019f163c3b06d8bdf78b355https://git.kernel.org/stable/c/e15bb292b24630ee832bfc7fd616bd72c7682bbbhttps://git.kernel.org/stable/c/ff05ed4ae214011464a0156f05cac1b0b46b5fbchttps://git.kernel.org/stable/c/171f8a49f212e87a8b04087568e1b3d132e36a18https://git.kernel.org/stable/c/b3c21c9c7289692f4019f163c3b06d8bdf78b355https://git.kernel.org/stable/c/e15bb292b24630ee832bfc7fd616bd72c7682bbbhttps://git.kernel.org/stable/c/ff05ed4ae214011464a0156f05cac1b0b46b5fbc
2024-03-02
Published