DMA Channel Vulnerability in Hisilicon's Linux Kernel

CVE-2022-50362

What is CVE-2022-50362?

A vulnerability in the Linux kernel's DMA engine for Hisilicon products allows multiple threads to incorrectly manage a DMA channel. This can lead to kernel panics and system hangs due to data races when threads manipulate the channel's descriptor concurrently. The mishandling of descriptors can result in unprocessed interrupts and timeouts. Recent patches enhance the DMA channel handling by ensuring that descriptor changes happen only after use, preventing threads from directly accessing and modifying the channel's descriptor concurrently. The updates aim to provide safer multi-threaded DMA operations, avoiding transmission failures.

References