Kernel Vulnerability in Linux Package: Refcount Leak in PowerPC IOMMU
Summary
DEBIAN-CVE-2024-26709: In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach The function spapr_tce_platform_iommu_attach_dev() is missing to call iom... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and hardware communication. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are crucial for the overall performance and reliability of the operating system. This specific vulnerability affects the PowerPC architecture, particularly in the IOMMU (Input-Output Memory Management Unit) subsystem, which is responsible for managing memory access for devices.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the PowerPC IOMMU subsystem, specifically within the function spapr_tce_platform_iommu_attach_dev(). The issue arises from a missing call to iommu_group_put() when the domain is already set, leading to a reference count leak. This leak can trigger a kernel bug during the Dynamic Logical Partitioning (DLPAR) remove operation, resulting in a kernel panic. The vulnerability is classified as a bug in the kernel code, which can lead to system instability and potential denial of service.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the package as described above.
Conclusion
The vulnerability identified in the Linux kernel's PowerPC IOMMU subsystem poses a significant risk due to its potential to cause system instability. Users are strongly encouraged to update their Linux packages to the patched version 6.7.7-1 or later to ensure their systems remain secure.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a reference count leak in the PowerPC IOMMU subsystem of the Linux kernel, which can lead to kernel panics during certain operations.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
If exploited, this vulnerability can lead to system instability and denial of service, potentially causing critical failures in systems relying on the Linux kernel.
Yes, the vulnerability is fixed in version 6.7.7-1 and later of the Linux package.
While there are no specific workarounds, it is recommended to prioritize updating your system to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
