Critical DMA Buffer Leak in Linux Kernel: linux Package Vulnerability
Summary
DEBIAN-CVE-2024-26912: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkm_gsp_mem objects. Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The linux package is the core of the Debian operating system, providing essential functionalities for hardware management and system operations. It is responsible for managing system resources and facilitating communication between software and hardware components. This vulnerability affects versions of the linux package in Debian 13 and 14, specifically related to the Nouveau graphics driver, which manages DMA buffers. The issue arises from improper deallocation of DMA buffers, potentially leading to resource leaks and system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Nouveau graphics driver related to DMA buffer management. The driver fails to properly deallocate several DMA buffers managed by nvkm_gsp_mem objects. This oversight can lead to memory leaks, where allocated buffers remain in memory even after they are no longer needed. The vulnerability can be exploited if the GSP-RM attempts to access these deallocated buffers, potentially causing system crashes or erratic behavior. The issue has been addressed in the patched version of the linux package, which includes enhancements to buffer management and error handling.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to monitor their systems for any unusual behavior and ensure that they apply the patch as soon as it becomes available.
Conclusion
The vulnerability in the linux package related to DMA buffer management poses significant risks to system stability and performance. It is crucial for users to update their systems to the patched version to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper management of DMA buffers in the Nouveau graphics driver, leading to potential memory leaks.
The vulnerability affects the linux package in Debian 13 and 14 prior to version 6.7.7-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can lead to memory leaks, system crashes, and erratic behavior of the graphics driver.
Yes, a patch is available in version 6.7.7-1 of the linux package. Users should update to this version to resolve the issue.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
