CVE-2024-26842: linux-libc-dev - Fix shift issue in ufshcd_clear_cmd()
Summary
CVE-2024-26842: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() When task_tag >= 32 (in MCQ mode) and sizeof(unsigned int) == 4, 1U. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Debian distribution that provides the C library headers for the Linux kernel. It is an essential component for compiling and building applications that run on the Linux operating system. The package contains various header files that define system calls, data types, and other necessary functions for interacting with the kernel. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability (CVE-2024-26842) in the linux-libc-dev package is related to the scsi (Small Computer System Interface) subsystem and specifically the ufs (Universal Flash Storage) core. The issue arises from a shift issue in the ufshcd_clear_cmd() function. When the task_tag value is greater than or equal to 32 in MCQ (Multi-Command Queue) mode and the size of an unsigned integer is 4 bytes, the bitwise shift operation (1U << task_tag) exceeds the bounds of a 32-bit mask. This can lead to a SHIFT_ISSUE, where bitwise shifts are performed outside the valid range for the data type. The vulnerability can result in unexpected kernel BRK exceptions, internal errors, and other potential system instabilities.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the official fix or update the linux-libc-dev package to a non-vulnerable version.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability (CVE-2024-26842) related to the scsi subsystem and the ufshcd_clear_cmd() function. This vulnerability can lead to unexpected kernel BRK exceptions and other system instabilities. It is recommended to update the linux-libc-dev package to a non-vulnerable version or apply the official fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Debian distribution that provides the C library headers for the Linux kernel. It is used for compiling and building applications that run on Linux.
The vulnerability can lead to unexpected kernel BRK exceptions, internal errors, and potential system instabilities.
To fix this vulnerability, it is recommended to update the linux-libc-dev package to a version that includes the fix for the ufshcd_clear_cmd() function.
No specific workaround has been provided for this vulnerability. It is recommended to apply the official fix or update the linux-libc-dev package.
You can find more information about this vulnerability on the official Debian Security Tracker and the National Vulnerability Database (NVD).
Related vulnerabilities
Recent vulnerabilities recorded for linux.
