Critical Vulnerability in Linux Package: Late Dereference Check in Display Stream Compressor
Summary
DEBIAN-CVE-2024-26647: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' In link_set_dsc_pps_packet(), 'struct display_stream_compressor *dsc' wa... Affects linux versions < 6.6.15-1. Fixed in 6.6.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device control. The Linux package in Debian versions 13 and 14 is crucial for system stability and performance. However, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the DRM AMD display component. Specifically, the function 'link_set_dsc_pps_packet()' improperly dereferences a pointer to 'struct display_stream_compressor *dsc' before checking if it is NULL. This oversight can lead to potential crashes or undefined behavior, as the system may attempt to access invalid memory locations. The vulnerability is classified under DEBIAN-CVE-2024-26647 and affects the Linux package in Debian versions 13 and 14, with the issue being resolved in version 6.6.15-1.
How To Fix
Minimum fixed version
6.6.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The vulnerability identified in the Linux package poses significant risks to system stability and security. It is crucial for users to update to the patched version 6.6.15-1 to protect their systems from potential exploitation. Regular monitoring and timely updates are essential practices for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a late dereference check in the display stream compressor, which can lead to system crashes or undefined behavior.
The vulnerability affects Debian versions 13 and 14 of the Linux package prior to version 6.6.15-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected without requiring any signup.
While there are no specific workarounds, it is recommended to monitor the situation and apply the update as soon as possible to mitigate risks.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26647.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
