CVE-2024-47667
Texas Instruments AM65x/DRA80xM PCIe Buffer Overflow Hang Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang. The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here. The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed. [1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf
INFO
Published Date :
Oct. 9, 2024, 3:15 p.m.
Last Modified :
Oct. 23, 2024, 4:31 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-47667.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-47667 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-47667 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Oct. 23, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 No Types Assigned https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 Patch Changed Reference Type https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 No Types Assigned https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 Patch Changed Reference Type https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa No Types Assigned https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa Patch Changed Reference Type https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 No Types Assigned https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 Patch Changed Reference Type https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 No Types Assigned https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 Patch Changed Reference Type https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a No Types Assigned https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a Patch Changed Reference Type https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 No Types Assigned https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 Patch Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 5.4.284 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.226 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.167 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.110 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.51 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.10 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 09, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang. The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here. The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed. [1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf Added Reference kernel.org https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-47667 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-47667
weaknesses.