CVE-2024-50295

What it actually does

Incorrect device pointer passed to dma_map_single/dma_unmap_single in network ARC driver, bypassing the device with proper dma_mask and risking DMA mapping failures or memory access issues.

Why it matters to the business

Network instability or crashes on affected systems can disrupt operations and require emergency patching, especially given mentions in broad kernel exploitation campaigns despite low EPSS.

How an attack unfolds

Attacker triggers network device setup or DMA operations on vulnerable ARC hardware; mismatched parent/child device leads to improper mappings that may be abused in kernel memory corruption scenarios referenced in 2024 zero-day and Linux out-of-bounds campaigns.

How to fix it

Upgrade affected packages to the listed fixed versions such as flashplugin-nonfree (Ubuntu:14.04:LTS) 11.2.202.554ubuntu0.14.04.1; apply kernel updates addressing the DMA device reference; prioritize based on CISA-style deadlines if KEV status changes.

How to confirm the fix worked

Confirm upgraded package versions match the fixed releases; inspect kernel logs for absence of dma_map_page_attrs warnings on device init; re-test network interface bring-up under load.

Typical attack path

1. Identify systems with ARC network hardware
2. Trigger driver initialization or packet handling paths
3. Force dma_map_single calls with ndev->dev instead of parent
4. Exploit resulting mapping warnings or corruption for privilege escalation or denial of service

How to detect it

Search kernel logs and dmesg for dma_map_page_attrs warnings during network device probe; review system boot and network initialization events for ARC driver activity tied to the listed threat actor patterns.

What your security team should do

• Apply the exact fixed package versions immediately on all Ubuntu 14.04 LTS instances
• Monitor EPSS trend and threat actor reports for Linux kernel DMA issues
• Audit network drivers for similar parent/child device mismatches
• Enable enhanced kernel logging for DMA operations