linux: In the Linux kernel, the following vulnerability has been resolved: parisc: fix a possible DMA corruption ARCH_DMA_...
CVE-2024-44949 is fixed in 15 products on 1 platform, first by DEBIAN-CVE-2024-44949, released September 4, 2024. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: parisc: fix a possible DMA corruption ARCH_DMA_MINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the other is written using cached write, the value that was written with DMA may be corrupted. This commit changes ARCH_DMA_MINALIGN to be 128 on PA20 and 32 on PA1.1 - that's the largest possible cache line size. As different parisc microarchitectures have different cache line size, we define arch_slab_minalign(), cache_line_size() and dma_get_cache_alignment() so that the kernel may tune slab cache parameters dynamically, based on the detected cache line size.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| bpftool · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-core · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-core · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-devel · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-devel · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-doc · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-doc · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.119-1 | DEBIAN-CVE-2024-44949 | Sep 4, 2024 |
| linux · Debian 13.5 (trixie) | 6.10.6-1 | DEBIAN-CVE-2024-44949 | Sep 4, 2024 |
| linux · Debian 14 | 6.10.6-1 | DEBIAN-CVE-2024-44949 | Sep 4, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.