Critical NULL Pointer Dereference in Linux Kernel - CVE-2024-26611
Summary
DEBIAN-CVE-2024-26611: In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC XDP Currently when packet is shrunk via bpf_xdp_adjust_tail() and memory type is set to MEM_TYPE_XSK_B... Affects linux versions < 6.6.15-1. Fixed in 6.6.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel is critical for system stability and performance, and vulnerabilities within it can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
CVE-2024-26611 is a vulnerability in the Linux kernel that arises from improper handling of multi-buffer BPF helpers for Zero-Copy (ZC) XDP. When a packet is shrunk using the bpf_xdp_adjust_tail() function and the memory type is set to MEM_TYPE_XSK_BUFF_POOL, it can lead to a NULL pointer dereference. This issue can cause kernel crashes and system instability, as evidenced by the error messages indicating a NULL pointer dereference during execution. The vulnerability is rooted in the handling of xdp_buff arguments, which can be passed as NULL, leading to critical failures in the kernel.
How To Fix
Minimum fixed version
6.6.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2024-26611 is a critical vulnerability in the Linux kernel that can lead to severe system instability due to NULL pointer dereference. Users are advised to update their systems to the patched version to mitigate risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2024-26611 is a vulnerability in the Linux kernel that can lead to a NULL pointer dereference, causing system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to kernel crashes, system instability, and potential unauthorized access to system resources.
You can update your Linux kernel using the command 'sudo apt-get update && sudo apt-get install linux'. Make sure to reboot your system afterward.
Currently, there are no specific workarounds available. The recommended action is to apply the patch as soon as it is released.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
