Kernel Vulnerability in Linux Package: Access Error in Temperature Configuration Registers
Summary
DEBIAN-CVE-2024-26730: In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total num... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system, responsible for managing hardware resources and enabling communication between software and hardware. It is widely used in various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the hwmon subsystem, which monitors hardware temperatures. The issue arises from a mismatch between the number of temperature configuration registers and the total number of temperature registers, leading to potential access errors.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the hwmon subsystem, specifically in the nct6775 driver. The issue stems from the fact that the number of temperature configuration registers does not always align with the total number of temperature registers. This discrepancy can lead to access errors, particularly when Kernel Address Sanitizer (KASAN) is enabled. The error manifests as a global-out-of-bounds access, which could potentially compromise system stability and security.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
In summary, a vulnerability has been identified in the Linux kernel affecting the hwmon subsystem, which could lead to access errors. Users are advised to update to the patched version 6.7.7-1 to mitigate any risks associated with this vulnerability. Regular monitoring using tools like Vulert can help keep systems secure.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves access errors in the temperature configuration registers of the hwmon subsystem in the Linux kernel.
The vulnerability affects Linux kernel versions in Debian 13 and 14 prior to the fixed version 6.7.7-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The risks include system instability and potential security breaches due to global-out-of-bounds access errors.
Currently, there are no specific workarounds available, so applying the patch is the best course of action.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
