Kernel NULL Pointer Dereference Vulnerability in Linux Package
Summary
DEBIAN-CVE-2023-52490: In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping during page migration When running stress-ng testing, we found below kernel crash after a few hours: Una... Affects linux versions < 6.6.15-1. Fixed in 6.6.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and is critical for system stability and performance. This vulnerability affects the memory management subsystem, specifically during page migration, which can lead to system crashes under certain stress conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the memory management subsystem related to page migration. When a page is being migrated, the kernel may encounter a NULL pointer dereference due to an incorrect page mapping. This issue arises when one thread performs page migration while another attempts to offline the target page, leading to a crash. The vulnerability is caused by the target page's mapping field not being set correctly, which can result in the system being unable to handle the dereference, ultimately crashing the kernel.
How To Fix
Minimum fixed version
6.6.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to system stability, particularly during memory management operations. Users are strongly advised to update to the patched version to mitigate potential crashes and data loss.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to kernel crashes, resulting in system instability and potential data loss.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability affects all versions of the Linux package prior to 6.6.15-1.
Yes, if the kernel crashes due to this vulnerability, there is a risk of data loss and system instability.
If you cannot update immediately, monitor your system closely for crashes and consider minimizing the use of memory-intensive applications until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
