Kernel Stack Overflow Vulnerability in Linux Package
Summary
DEBIAN-CVE-2023-52761: In the Linux kernel, the following vulnerability has been resolved: riscv: VMAP_STACK overflow detection thread-safe commit 31da94c25aea ("riscv: add VMAP_STACK overflow detection") added support for CONFIG_VMAP_STACK. Affects linux versions < 6.6.8-1. Fixed in 6.6.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for running applications and services on the system. This vulnerability specifically affects the RISC-V architecture, where improper handling of stack overflow can lead to system instability and crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the VMAP_STACK overflow detection mechanism. The issue arises when multiple CPUs or hardware threads (harts) race to handle a stack overflow, potentially corrupting each other's state due to the shared nature of the shadow stack. This can lead to kernel panics and system crashes, as evidenced by the kernel crash log indicating insufficient stack space to handle exceptions. The vulnerability was introduced with the commit that added support for CONFIG_VMAP_STACK and has been addressed in a subsequent patch.
How To Fix
Minimum fixed version
6.6.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability, particularly for RISC-V architecture users. It is essential to apply the available patch promptly to safeguard against potential crashes and data loss. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a stack overflow issue in the Linux kernel that can lead to system crashes when multiple CPUs handle the overflow simultaneously.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can cause kernel panics, leading to system instability and potential data loss.
Yes, a patch has been released in version 6.6.8-1 of the Linux package for both Debian 13 and Debian 14.
While there are no specific workarounds, it is crucial to prioritize updating your system to the patched version to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
