---
id: CVE-2024-27408
title: >-
  dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in
  remote setup
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in
  remote setup


  The Linked list element and pointer are not stored in the same memory as

  the e…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 <
    85cb0ca8efa483e5d22385ea12fc5857c48a0904
  - >-
    Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 <
    d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3
  - >-
    Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 <
    f396b4df27cfe01a99f4b41f584c49e56477be3a
  - >-
    Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 <
    bbcc1c83f343e580c3aa1f2a8593343bf7b55bba
  - Linux 5.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-05-21T16:00:32.783313Z'
published: '2024-05-17'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:18:13.788Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-27408'
references:
  - url: 'https://git.kernel.org/stable/c/85cb0ca8efa483e5d22385ea12fc5857c48a0904'
  - url: 'https://git.kernel.org/stable/c/d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3'
  - url: 'https://git.kernel.org/stable/c/f396b4df27cfe01a99f4b41f584c49e56477be3a'
  - url: 'https://git.kernel.org/stable/c/bbcc1c83f343e580c3aa1f2a8593343bf7b55bba'
tags:
  - cve.org
epss: 0.00192
epssPercentile: 0.0891
ingestedAt: '2026-11-03T12:44:28.809Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

The Linked list element and pointer are not stored in the same memory as
the eDMA controller register. If the doorbell register is toggled before
the full write of the linked list a race condition error will occur.
In remote setup we can only use a readl to the memory to assure the full
write has occurred.

## Affected

- `Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 < 85cb0ca8efa483e5d22385ea12fc5857c48a0904`
- `Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 < d24fe6d5a1cfdddb7a9ef56736ec501c4d0a5fd3`
- `Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 < f396b4df27cfe01a99f4b41f584c49e56477be3a`
- `Linux >= 7e4b8a4fbe2cecab0959e862604803d063f50029 < bbcc1c83f343e580c3aa1f2a8593343bf7b55bba`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.