CVE-2023-52517

Summary

CVE-2023-52517 is a vulnerability affecting the Linux kernel's SPI (Serial Peripheral Interface) subsystem for Sunxi chips. The issue lies in the handling of DMA (Direct Memory Access) RX transfers, where the completion interrupt triggers the RX FIFO drain procedure before the DMA engine has finished copying data to the buffer. This results in a race condition, leading to corrupted data being read. To rectify the issue, the FIFO drain is now only permitted in interrupt mode, and the RX DMA completion is waited for in DMA mode before returning, ensuring all data is safely transferred to the supplied memory buffer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.