GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-47667 (GCVE-0-2024-47667)

Vulnerability from cvelistv5 – Published: 2024-10-09 14:13 – Updated: 2026-08-05 11:39
VLAI
Title
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
Summary
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spans more than two internal AXI 128-byte bursts, the bus may corrupt the packet payload and the corrupt data may cause associated applications or the processor to hang. The workaround for Errata #i2037 is to limit the maximum read request size and maximum payload size to 128 bytes. Add workaround for Errata #i2037 here. The errata and workaround is applicable only to AM65x SR 1.0 and later versions of the silicon will have this fixed. [1] -> https://www.ti.com/lit/er/sprz452i/sprz452i.pdf
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-10 13:21 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < cfb006e185f64edbbdf7869eac352442bc76b8f6 (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < ebbdbbc580c1695dec283d0ba6448729dc993246 (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < 135843c351c08df72bdd4b4ebea53c8052a76881 (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < af218c803fe298ddf00abef331aa526b20d7ea61 (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < dd47051c76c8acd8cb983f01b4d1265da29cb66a (git)
Affected: 18b0415bc802a8bab5dedba5ae2757e83259e6ee , < 86f271f22bbb6391410a07e08d6ca3757fda01fa (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.2
Unaffected: 0 , < 5.2 (semver)
Unaffected: 5.4.284 , ≤ 5.4.* (semver)
Unaffected: 5.10.226 , ≤ 5.10.* (semver)
Unaffected: 5.15.167 , ≤ 5.15.* (semver)
Unaffected: 6.1.110 , ≤ 6.1.* (semver)
Unaffected: 6.6.51 , ≤ 6.6.* (semver)
Unaffected: 6.10.10 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T13:21:25.873788Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T13:21:40.905Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:20:31.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/controller/dwc/pci-keystone.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cfb006e185f64edbbdf7869eac352442bc76b8f6",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "ebbdbbc580c1695dec283d0ba6448729dc993246",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "135843c351c08df72bdd4b4ebea53c8052a76881",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "af218c803fe298ddf00abef331aa526b20d7ea61",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "576d0fb6f8d4bd4695e70eee173a1b9c7bae9572",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "dd47051c76c8acd8cb983f01b4d1265da29cb66a",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            },
            {
              "lessThan": "86f271f22bbb6391410a07e08d6ca3757fda01fa",
              "status": "affected",
              "version": "18b0415bc802a8bab5dedba5ae2757e83259e6ee",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/controller/dwc/pci-keystone.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.226",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.51",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.284",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.226",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.167",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.110",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.51",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.10",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)\n\nErrata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0\n(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an\ninbound PCIe TLP spans more than two internal AXI 128-byte bursts,\nthe bus may corrupt the packet payload and the corrupt data may\ncause associated applications or the processor to hang.\n\nThe workaround for Errata #i2037 is to limit the maximum read\nrequest size and maximum payload size to 128 bytes. Add workaround\nfor Errata #i2037 here.\n\nThe errata and workaround is applicable only to AM65x SR 1.0 and\nlater versions of the silicon will have this fixed.\n\n[1] -\u003e https://www.ti.com/lit/er/sprz452i/sprz452i.pdf"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The defect is in the PCIe root complex\u0027s handling of oversized inbound TLPs on AM65x SR 1.0 silicon; it is triggered by DMA traffic to/from an attached endpoint, which a local user drives through ordinary file or network I/O rather than by any remotely-supplied protocol data.\nAC:L - The PCIe-spec default MRRS of 512 bytes is left in place on every downstream device of an unpatched AM654x root complex, so the \u003e2\u00d7128-byte AXI burst condition is satisfied by default and repeated large transfers reliably hit the erratum \u2014 no race or unattainable state is involved.\nPR:L - No capability check guards the path; any unprivileged local user performing normal I/O against a PCIe-attached storage, network, or wireless device causes the oversized transfers that trigger the payload corruption and hang.\nUI:N - No victim action is required \u2014 the oversized transfers occur as a direct result of the attacker\u0027s own I/O activity against the PCIe device.\nS:U - The corruption and hang are confined to the SoC\u0027s own kernel and its DMA-mapped memory; no separate security authority such as a hypervisor or IOMMU boundary is crossed.\nC:L - The erratum corrupts in-flight TLP payloads within the controller\u0027s internal AXI buffers, so residual data from unrelated transactions can be substituted into a buffer the attacker can read back, giving a limited and unpredictable disclosure.\nI:H - The bus silently corrupts arbitrary PCIe payload data crossing between the endpoint and system memory \u2014 including kernel driver buffers and DMA-managed structures \u2014 and the erratum explicitly notes the corrupt data can destabilize the processor, so integrity loss is serious and uncontrolled.\nA:H - TI documents that the corrupt data can cause associated applications or the processor itself to hang, which is a complete denial of service on the affected system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:39:16.448Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246"
        },
        {
          "url": "https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881"
        },
        {
          "url": "https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61"
        },
        {
          "url": "https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a"
        },
        {
          "url": "https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa"
        }
      ],
      "title": "PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-47667",
    "datePublished": "2024-10-09T14:13:59.522Z",
    "dateReserved": "2024-09-30T16:00:12.936Z",
    "dateUpdated": "2026-08-05T11:39:16.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-47667",
      "date": "2026-09-16",
      "epss": "0.0021",
      "percentile": "0.11415"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.4.284\", \"matchCriteriaId\": \"B1C17E9C-479F-4AE4-8344-B7A213DE3E83\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.226\", \"matchCriteriaId\": \"864FC17C-501A-4823-A643-6F35D65D8A97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.167\", \"matchCriteriaId\": \"043405A4-25FE-45D4-A7BB-2A0C3B7D17C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.110\", \"matchCriteriaId\": \"6B1A95FC-7E7E-428B-BB59-F76640C652AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.51\", \"matchCriteriaId\": \"E4529134-BAC4-4776-840B-304009E181A0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.10\", \"matchCriteriaId\": \"ACDEE48C-137A-4731-90D0-A675865E1BED\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nPCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)\\n\\nErrata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0\\n(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an\\ninbound PCIe TLP spans more than two internal AXI 128-byte bursts,\\nthe bus may corrupt the packet payload and the corrupt data may\\ncause associated applications or the processor to hang.\\n\\nThe workaround for Errata #i2037 is to limit the maximum read\\nrequest size and maximum payload size to 128 bytes. Add workaround\\nfor Errata #i2037 here.\\n\\nThe errata and workaround is applicable only to AM65x SR 1.0 and\\nlater versions of the silicon will have this fixed.\\n\\n[1] -\u003e https://www.ti.com/lit/er/sprz452i/sprz452i.pdf\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: keystone: Agregar workaround para Errata #i2037 (AM65x SR 1.0) Errata #i2037 en procesadores AM65x/DRA80xM Silicon Revision 1.0 (SPRZ452D_julio de 2018_revisado en diciembre de 2019 [1]) menciona que cuando un TLP PCIe entrante abarca m\\u00e1s de dos r\\u00e1fagas internas AXI de 128 bytes, el bus puede da\\u00f1ar el payload del paquete y los datos da\\u00f1ados pueden hacer que las aplicaciones asociadas o el procesador se cuelguen. El workaround para Errata #i2037 es limitar el tama\\u00f1o m\\u00e1ximo de solicitud de lectura y el tama\\u00f1o m\\u00e1ximo de payloas a 128 bytes. Agregar workaround para Errata #i2037 aqu\\u00ed. La errata y el workaround a son aplicables solo a AM65x SR 1.0 y las versiones posteriores del silicio tendr\\u00e1n esto corregido. [1] -\u0026gt; https://www.ti.com/lit/er/sprz452i/sprz452i.pdf\"}]",
      "id": "CVE-2024-47667",
      "lastModified": "2024-10-23T16:31:43.003",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-10-09T15:15:15.430",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-47667\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-09T15:15:15.430\",\"lastModified\":\"2026-08-04T11:20:36.903\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nPCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)\\n\\nErrata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0\\n(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an\\ninbound PCIe TLP spans more than two internal AXI 128-byte bursts,\\nthe bus may corrupt the packet payload and the corrupt data may\\ncause associated applications or the processor to hang.\\n\\nThe workaround for Errata #i2037 is to limit the maximum read\\nrequest size and maximum payload size to 128 bytes. Add workaround\\nfor Errata #i2037 here.\\n\\nThe errata and workaround is applicable only to AM65x SR 1.0 and\\nlater versions of the silicon will have this fixed.\\n\\n[1] -\u003e https://www.ti.com/lit/er/sprz452i/sprz452i.pdf\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: keystone: Agregar workaround para Errata #i2037 (AM65x SR 1.0) Errata #i2037 en procesadores AM65x/DRA80xM Silicon Revision 1.0 (SPRZ452D_julio de 2018_revisado en diciembre de 2019 [1]) menciona que cuando un TLP PCIe entrante abarca m\u00e1s de dos r\u00e1fagas internas AXI de 128 bytes, el bus puede da\u00f1ar el payload del paquete y los datos da\u00f1ados pueden hacer que las aplicaciones asociadas o el procesador se cuelguen. El workaround para Errata #i2037 es limitar el tama\u00f1o m\u00e1ximo de solicitud de lectura y el tama\u00f1o m\u00e1ximo de payloas a 128 bytes. Agregar workaround para Errata #i2037 aqu\u00ed. La errata y el workaround a son aplicables solo a AM65x SR 1.0 y las versiones posteriores del silicio tendr\u00e1n esto corregido. [1] -\u0026gt; https://www.ti.com/lit/er/sprz452i/sprz452i.pdf\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/pci/controller/dwc/pci-keystone.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"cfb006e185f64edbbdf7869eac352442bc76b8f6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"ebbdbbc580c1695dec283d0ba6448729dc993246\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"135843c351c08df72bdd4b4ebea53c8052a76881\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"af218c803fe298ddf00abef331aa526b20d7ea61\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"576d0fb6f8d4bd4695e70eee173a1b9c7bae9572\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"dd47051c76c8acd8cb983f01b4d1265da29cb66a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18b0415bc802a8bab5dedba5ae2757e83259e6ee\",\"lessThan\":\"86f271f22bbb6391410a07e08d6ca3757fda01fa\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/pci/controller/dwc/pci-keystone.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.284\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.226\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.167\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.110\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.51\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.10\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-10T13:21:25.873788Z\",\"id\":\"CVE-2024-47667\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.284\",\"matchCriteriaId\":\"B1C17E9C-479F-4AE4-8344-B7A213DE3E83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.226\",\"matchCriteriaId\":\"864FC17C-501A-4823-A643-6F35D65D8A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.167\",\"matchCriteriaId\":\"043405A4-25FE-45D4-A7BB-2A0C3B7D17C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.110\",\"matchCriteriaId\":\"6B1A95FC-7E7E-428B-BB59-F76640C652AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.51\",\"matchCriteriaId\":\"E4529134-BAC4-4776-840B-304009E181A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.10\",\"matchCriteriaId\":\"ACDEE48C-137A-4731-90D0-A675865E1BED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T10:02:38+00:00",
      "cve": "CVE-2024-47667",
      "id": "CVE-2024-47667",
      "initial_release_date": "2024-10-09T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-47667.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T01:47:15Z",
      "cve": "CVE-2024-47667",
      "id": "CVE-2024-47667",
      "initial_release_date": "2024-10-11T02:48:13Z",
      "product_status:known_affected": "354",
      "product_status:known_not_affected": "294",
      "product_status:recommended": "630",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-47667",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-47667.json",
      "version": "80"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:20:31.801Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-47667\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-10T13:21:25.873788Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-10T13:21:29.749Z\"}}], \"cna\": {\"title\": \"PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"cfb006e185f64edbbdf7869eac352442bc76b8f6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"ebbdbbc580c1695dec283d0ba6448729dc993246\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"135843c351c08df72bdd4b4ebea53c8052a76881\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"af218c803fe298ddf00abef331aa526b20d7ea61\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"576d0fb6f8d4bd4695e70eee173a1b9c7bae9572\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"dd47051c76c8acd8cb983f01b4d1265da29cb66a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18b0415bc802a8bab5dedba5ae2757e83259e6ee\", \"lessThan\": \"86f271f22bbb6391410a07e08d6ca3757fda01fa\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/pci/controller/dwc/pci-keystone.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.2\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.2\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.284\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.226\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.167\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.110\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.51\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/pci/controller/dwc/pci-keystone.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/cfb006e185f64edbbdf7869eac352442bc76b8f6\"}, {\"url\": \"https://git.kernel.org/stable/c/ebbdbbc580c1695dec283d0ba6448729dc993246\"}, {\"url\": \"https://git.kernel.org/stable/c/135843c351c08df72bdd4b4ebea53c8052a76881\"}, {\"url\": \"https://git.kernel.org/stable/c/af218c803fe298ddf00abef331aa526b20d7ea61\"}, {\"url\": \"https://git.kernel.org/stable/c/576d0fb6f8d4bd4695e70eee173a1b9c7bae9572\"}, {\"url\": \"https://git.kernel.org/stable/c/dd47051c76c8acd8cb983f01b4d1265da29cb66a\"}, {\"url\": \"https://git.kernel.org/stable/c/86f271f22bbb6391410a07e08d6ca3757fda01fa\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nPCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)\\n\\nErrata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0\\n(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an\\ninbound PCIe TLP spans more than two internal AXI 128-byte bursts,\\nthe bus may corrupt the packet payload and the corrupt data may\\ncause associated applications or the processor to hang.\\n\\nThe workaround for Errata #i2037 is to limit the maximum read\\nrequest size and maximum payload size to 128 bytes. Add workaround\\nfor Errata #i2037 here.\\n\\nThe errata and workaround is applicable only to AM65x SR 1.0 and\\nlater versions of the silicon will have this fixed.\\n\\n[1] -\u003e https://www.ti.com/lit/er/sprz452i/sprz452i.pdf\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.284\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.226\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.167\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.110\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.51\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.10\", \"versionStartIncluding\": \"5.2\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"5.2\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:53:50.473Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-47667\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-05T10:53:50.473Z\", \"dateReserved\": \"2024-09-30T16:00:12.936Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-09T14:13:59.522Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.