CVE-2024-26757: Vulnerability in linux-libc-dev package - md: Don't ignore read-only array in md_check_recovery()
Summary
CVE-2024-26757: In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore read-only array in md_check_recovery() Usually if the array is not read-write, md_check_recovery() won't register new sync_thread in th... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs that use the Linux kernel interfaces. It is an essential component for building and linking applications on Debian-based systems. This package is vulnerable to a flaw in the md_check_recovery() function of the kernel's md subsystem. The vulnerability allows an attacker to trigger a hang condition in certain scenarios, potentially leading to a denial of service (DoS) attack.
Vulnerability Detail
The vulnerability arises from a race condition in the handling of read-only arrays by the md_check_recovery() function. Under normal circumstances, if the array is not read-write, md_check_recovery() would not register a new sync_thread. However, after a specific commit, a hang condition can be triggered if the following steps occur: 1) the array is made read-write, 2) a new sync_thread is registered concurrently, 3) the array is set back to read-only, 4) the array is stopped, and 5) the sync_thread cannot be unregistered, resulting in a hang. This vulnerability can be exploited by an attacker with local access to the system to cause a DoS condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at this time.
Conclusion
The linux-libc-dev package is vulnerable to a flaw in the md_check_recovery() function, which can be exploited to cause a denial of service (DoS) condition. It is recommended to update the package to version 6.1.90-1 or later to mitigate this vulnerability. If you require further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides the necessary header files and libraries for compiling C programs that use the Linux kernel interfaces. It is an essential component for building and linking applications on Debian-based systems.
md_check_recovery() is a function in the Linux kernel's md subsystem that is responsible for checking if recovery is needed for a given array. It handles various aspects of recovery and synchronization for software RAID arrays.
A race condition is a type of software vulnerability that occurs when the behavior of a program depends on the relative timing of events. In this case, the vulnerability arises from a race condition in the handling of read-only arrays by the md_check_recovery() function.
A denial of service (DoS) attack is an attack that aims to disrupt the normal functioning of a system or network, rendering it unavailable to users. In the context of this vulnerability, an attacker can trigger a hang condition, potentially leading to a DoS condition.
No, this vulnerability requires local access to the system in order to exploit it.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
