Critical Memory Access Vulnerability in Linux Kernel: enic Package
Summary
CVE-2024-38659: In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_vf_port enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MA... Affects linux versions < 5.10.221-1. Fixed in 5.10.221-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. The 'enic' package is a driver for Ethernet Network Interface Cards (NICs) that allows the operating system to communicate with the hardware. This package is crucial for network connectivity and performance. However, it has been identified to have a vulnerability that could lead to memory access issues, potentially compromising system stability and security.
Vulnerability Detail
In the Linux kernel, the 'enic_set_vf_port' function does not properly validate the lengths of certain netlink attributes, specifically IFLA_PORT_PROFILE, IFLA_PORT_INSTANCE_UUID, and IFLA_PORT_HOST_UUID. The function assumes these attributes are of fixed lengths, which can lead to out-of-bounds read access during memory operations. This vulnerability can be exploited to read unintended memory locations, potentially exposing sensitive data or causing system crashes.
How To Fix
Minimum fixed version
5.10.221-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the 'enic' driver or switch to a different network driver until the kernel is updated. This can be done by modifying the network configuration files to use an alternative driver.
Conclusion
The CVE-2024-38659 vulnerability in the Linux kernel's 'enic' package poses significant risks due to improper validation of netlink attributes, leading to potential memory access issues. Users are strongly advised to update their kernel to the latest patched version to mitigate these risks. Additionally, utilizing tools like Vulert can help in monitoring and managing vulnerabilities in open-source software.
See every vulnerability recorded for linux →
FAQ
CVE-2024-38659 is a vulnerability in the Linux kernel's 'enic' package that allows for out-of-bounds memory access due to improper validation of netlink attributes.
Exploitation of this vulnerability can lead to unauthorized memory access, potentially exposing sensitive information or causing system instability.
The vulnerability affects multiple versions of the Linux kernel across Debian 11, 12, and 13, specifically versions prior to 5.10.221-1, 6.1.94-1, and 6.9.7-1 respectively.
Yes, Vulert can be used to monitor and alert for open-source vulnerabilities in your software. It requires only a manifest file like package-lock.json to function.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
