Critical Vulnerability in Linux Package: CPU Sibling Map Update Issue
Summary
DEBIAN-CVE-2024-26841: In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs Update cpu_sibling_map when disabling nonboot CPUs by defining & calling clear_cpu_sibling... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware resources and system processes. It is responsible for interfacing with the system's hardware, managing memory, and handling process scheduling. This vulnerability specifically affects the CPU management aspect of the Linux kernel, where improper handling of CPU sibling maps can lead to system instability, particularly in systems with Simultaneous Multithreading (SMT) capabilities.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the handling of CPU sibling maps when disabling nonboot CPUs. The issue arises when the cpu_sibling_map is not updated correctly, leading to potential errors on SMT systems. This can result in warnings and system instability, as indicated by the error message: 'jump label: negative count!'. The vulnerability can be exploited in scenarios where nonboot CPUs are disabled, potentially leading to unexpected behavior or crashes in the system.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to avoid disabling nonboot CPUs until the patch is applied to mitigate potential risks.
Conclusion
The vulnerability in the Linux package regarding the CPU sibling map update poses significant risks to system stability, particularly in SMT environments. It is crucial for users to update to the patched version to ensure their systems remain secure. Regular monitoring for vulnerabilities using tools like Vulert can help maintain software integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system instability and crashes, particularly on systems utilizing SMT, due to improper handling of CPU sibling maps.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux package is 6.7.7-1 for both Debian 13 and Debian 14.
It is advisable to avoid disabling nonboot CPUs until the patch is applied to minimize risks associated with this vulnerability.
Detailed information can be found in the Debian CVE database or by referring to the official Linux kernel documentation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
