Memory Leak Vulnerability in Linux Kernel - Package: linux
Summary
DEBIAN-CVE-2024-26669: In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow off... Affects linux versions < 6.6.15-1. Fixed in 6.6.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'linux' package is a core component of the Debian operating system, providing the Linux kernel that manages system resources and hardware interactions. This package is essential for the functioning of the operating system, enabling various applications and services to run efficiently. However, it is susceptible to vulnerabilities that can compromise system stability and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the net/sched: flower component. When a queuing discipline (qdisc) is deleted from a network device, the kernel fails to properly notify the underlying driver to remove its flow offload callback from the associated filter block. This oversight leads to a memory leak, as the driver does not receive the necessary 'FLOW_CLS_TMPLT_DESTROY' command, resulting in unreferenced objects persisting in memory. The issue stems from a commit that altered the order of operations in the code, causing the memory leak to occur when filters are removed.
How To Fix
Minimum fixed version
6.6.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to prevent potential memory leaks.
Conclusion
The identified memory leak vulnerability in the Linux kernel's flower component poses a risk to system stability and performance. It is crucial for users of the 'linux' package on Debian systems to update to the patched version 6.6.15-1 or later to mitigate this issue. Regular monitoring and timely updates are essential to maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to memory leaks, which may degrade system performance over time and potentially cause crashes or instability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
While the primary concern is memory leaks and system instability, it is advisable to maintain regular backups to mitigate any potential risks.
It is recommended to regularly check for updates and apply them, especially when security vulnerabilities are disclosed.
If immediate updates are not possible, monitor system performance closely and consider isolating affected systems until a patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
