Critical NULL Pointer Dereference in Linux Kernel - linux Package Vulnerability
Summary
DEBIAN-CVE-2024-53060: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in de... Affects linux versions < 5.10.234-1. Fixed in 5.10.234-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux package is the core of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It is crucial for system stability and performance. This vulnerability affects various versions of the linux package across multiple Debian releases, highlighting the importance of maintaining an updated kernel to ensure system security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/amdgpu component, where a NULL pointer dereference could occur if ATIF is not supported. The function acpi_evaluate_object() may return AE_NOT_FOUND, leading to the dereferencing of a NULL pointer. Although this scenario may be rare, it poses a risk of system crashes or unexpected behavior, making it essential to address this issue promptly. This vulnerability has been documented as CID 1600951 in Coverity Report.
How To Fix
Minimum fixed version
5.10.234-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available patches as soon as possible.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to system stability and security. Users are strongly encouraged to update their systems to the latest patched versions of the linux package to protect against potential exploits. Regular monitoring and updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the Linux kernel's drm/amdgpu component, which can lead to system instability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploiting this vulnerability could lead to system crashes or unexpected behavior, impacting system reliability.
Yes, patches are available for various Debian versions. Ensure your system is updated to the latest patched version of the linux package.
While there are no specific workarounds, it is crucial to prioritize updating your system to mitigate the risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
