Critical NULL Pointer Dereference in Linux Kernel - CVE-2024-46721
Summary
CVE-2024-46721: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile->parent->dents[AAFS_PROF_DIR] could be NULL only if its parent is made from create_missing_ances... Affects linux versions < 5.10.226-1. Fixed in 5.10.226-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its robustness and flexibility, supporting a wide range of devices and architectures. However, vulnerabilities can arise, such as CVE-2024-46721, which affects the AppArmor security module, potentially compromising system stability and security.
Vulnerability Detail
CVE-2024-46721 is a critical vulnerability in the Linux kernel's AppArmor module, where a NULL pointer dereference can occur if the profile's parent directory is improperly handled. This situation arises when the parent is created using __create_missing_ancestors and the old entry is NULL during profile replacement. The result is a kernel panic, leading to system crashes and potential data loss. The vulnerability is characterized by a specific bug report indicating a NULL pointer dereference at address 0000000000000030, which can be exploited under certain conditions.
How To Fix
Minimum fixed version
5.10.226-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable AppArmor until the kernel is updated. This can be done by executing the following command:
sudo systemctl stop apparmor
However, this is not recommended as it reduces system security. It is crucial to apply the kernel update as soon as possible.
Conclusion
CVE-2024-46721 represents a significant vulnerability in the Linux kernel's AppArmor module, necessitating prompt action to mitigate risks. Users are strongly advised to update their systems to the latest kernel version to ensure protection against potential exploits. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2024-46721 is a vulnerability in the Linux kernel's AppArmor module that can lead to a NULL pointer dereference, causing system crashes.
Exploitation of this vulnerability can lead to kernel panics, resulting in system instability and potential data loss.
The vulnerability affects various Debian versions, including Debian 11, 12, and 13, that utilize the Linux kernel.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If an immediate update is not possible, consider disabling AppArmor temporarily as a workaround, but be aware that this reduces your system's security.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
