Kernel Vulnerability in Linux Package: AMD PMC Module STB Accessibility Issue
Summary
DEBIAN-CVE-2024-53072: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amd_pmc module as: amd_pmc enable_stb=1 ...can result in the following messages in th... Affects linux versions < 6.1.119-1. Fixed in 6.1.119-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient operation of the system. This vulnerability specifically affects the AMD PMC module, which is responsible for power management and system performance on AMD processors. The issue arises when the module is loaded with incorrect parameters, leading to potential system instability and error messages in the kernel ring buffer.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD PMC module related to the handling of the STB (System Trace Buffer). When the module is loaded with the parameter 'enable_stb=1', it can lead to kernel error messages indicating that the STB is not accessible. This occurs when the requests for physical address values return zero, suggesting that the STB is unavailable. The lack of proper handling for this scenario can result in warnings in the kernel log, which may confuse users and indicate deeper issues with system memory mapping.
How To Fix
Minimum fixed version
6.1.119-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid loading the AMD PMC module with the 'enable_stb=1' parameter until the package is updated. This can be done by modifying the module loading configuration or by not explicitly loading the module with that parameter.
Conclusion
The identified vulnerability in the Linux kernel regarding the AMD PMC module highlights the importance of proper parameter handling to prevent system errors. Users are encouraged to update their packages to the latest versions to mitigate risks associated with this issue.
See every vulnerability recorded for linux →
FAQ
The AMD PMC module is a component of the Linux kernel that manages power and performance features on AMD processors.
Failing to address this vulnerability may lead to system instability and confusion due to error messages in the kernel log.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While this vulnerability primarily affects system stability, it is always advisable to back up important data before applying updates or changes.
It is recommended to regularly check for and apply updates to your Linux packages to ensure security and stability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
