Critical Memory Access Vulnerability in Linux Kernel: CVE-2024-49934
Summary
CVE-2024-49934: In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name It's observed that a crash occurs during hot-remove a memory device, in which user... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management, process control, and system security. It is widely used in various distributions, including Debian, which is known for its stability and security. The kernel's functionality is crucial for system performance and reliability, but it is also susceptible to vulnerabilities that can lead to system crashes or unauthorized access. CVE-2024-49934 specifically affects the Linux kernel's handling of memory devices, particularly during operations involving hugetlb, which can lead to critical failures.
Vulnerability Detail
CVE-2024-49934 is a vulnerability in the Linux kernel that arises from improper handling of memory device hot-removal operations. When a memory device is hot-removed while a user is accessing hugetlb, it can trigger a crash due to an invalid access to dentry.d_name.name in the dump_mapping() function. This vulnerability can lead to system instability, data loss, and potential exploitation by malicious users. The issue stems from insufficient sanity checks in the dump_mapping() function, which fails to prevent access to invalid memory addresses, resulting in a page fault and kernel panic.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid performing hot-removal of memory devices while they are in use, particularly when accessing hugetlb. This can help mitigate the risk of triggering the vulnerability until a patch is applied.
Conclusion
CVE-2024-49934 is a critical vulnerability in the Linux kernel that poses significant risks to system stability and security. Users are strongly encouraged to update their systems to the latest kernel version to mitigate this issue. Additionally, understanding and implementing workarounds can provide temporary relief until a permanent fix is applied.
See every vulnerability recorded for linux →
FAQ
CVE-2024-49934 is a vulnerability in the Linux kernel that can cause system crashes during the hot-removal of memory devices.
This vulnerability can lead to kernel panics, system instability, and potential data loss if exploited.
Yes, users are advised to update their Linux kernel to the latest patched version to mitigate this vulnerability.
As a temporary measure, avoid hot-removing memory devices while they are in use to reduce the risk of triggering the vulnerability.
You can use Vulert, which monitors open-source vulnerabilities in real-time using a manifest file like package-lock.json. Check your application against vulnerabilities using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
