Critical Vulnerability in Linux Package: Incorrect RTAS Function Name Handling
Summary
DEBIAN-CVE-2024-26847: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the function name as "ibm,reset-pe-dma-windows" but in practice fi... Affects linux versions < 6.7.9-1. Fixed in 6.7.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device control. The kernel is crucial for system stability and performance. This vulnerability specifically affects the powerpc architecture, where an incorrect function name in the RTAS (Run-Time Abstraction Services) function table can lead to unexpected behavior and system warnings.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the handling of RTAS function names for resetting TCE (Translation Control Entry) tables. The PAPR (Power Architecture Platform Reference) specification defines the function name as 'ibm,reset-pe-dma-windows', but the firmware uses the singular form 'ibm,reset-pe-dma-window'. This mismatch causes reverse lookups to fail, resulting in warnings and potential system instability, especially when lockdep is enabled or RTAS tracepoints are active. The vulnerability can lead to system errors and may affect the performance of applications relying on these functions.
How To Fix
Minimum fixed version
6.7.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may disable the RTAS tracepoints or avoid using the affected functions until the system is updated. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The identified vulnerability in the Linux kernel regarding the incorrect RTAS function name can lead to significant system warnings and instability. Users are urged to update their systems to the patched version to mitigate any risks associated with this issue. Regular monitoring using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability arises from an incorrect function name in the RTAS function table, leading to failed lookups and system warnings.
The vulnerability affects all versions prior to 6.7.9-1 in Debian 13 and 14.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without requiring access to the code. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can lead to system warnings, instability, and potential performance degradation of applications relying on RTAS functions.
Yes, updating the Linux package to version 6.7.9-1 or later is the permanent fix for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
