Out-of-Bounds Memory Access in Linux Kernel - CVE-2024-50067
Summary
CVE-2024-50067: In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring buffer to avoid non-at... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for all other parts of the system. It manages hardware resources, facilitates communication between software and hardware, and ensures system stability. This vulnerability, CVE-2024-50067, affects the kernel's uprobe functionality, which is used for tracing and debugging user-space applications. The vulnerability arises from improper handling of user-space data, leading to potential memory access issues.
Vulnerability Detail
CVE-2024-50067 is a vulnerability in the Linux kernel's uprobe mechanism that allows for out-of-bounds memory access when fetching arguments into a percpu buffer. The issue occurs because the size of the percpu buffer is limited to a single page, while user-space strings and arrays can exceed this size. This oversight in the store_trace_args() function can lead to memory corruption, crashes, or even arbitrary code execution. The vulnerability can be exploited by an attacker who can run a specially crafted user-space application, triggering the out-of-bounds access and potentially compromising system integrity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can mitigate risks by avoiding the use of user-space applications that may trigger the uprobe functionality until the kernel is updated.
Conclusion
CVE-2024-50067 is a critical vulnerability in the Linux kernel that poses significant risks due to out-of-bounds memory access in the uprobe mechanism. Users are advised to update their kernel to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50067 is a vulnerability in the Linux kernel that allows for out-of-bounds memory access due to improper handling of user-space data in the uprobe mechanism.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to use the Vulert playground without signup.
The potential impacts include memory corruption, system crashes, and the possibility of arbitrary code execution, which can compromise system integrity.
To update your Linux kernel on a Debian-based system, use the command: sudo apt-get update && sudo apt-get upgrade linux. Ensure you reboot your system after the update.
While there are no specific workarounds, avoiding the use of applications that utilize the uprobe functionality can help mitigate risks until the kernel is updated.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
