Kernel Panic Vulnerability in Linux Package: CVE-2024-26947
Summary
DEBIAN-CVE-2024-26947: In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 ("arm: extend pfn_valid to take into account freed... Affects linux versions < 6.7.12-1. Fixed in 6.7.12-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for running applications and services on Debian systems. This vulnerability specifically affects the ARM architecture, where improper handling of memory mapping can lead to system crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that affects the handling of reserved memory addresses. The issue arises from changes made in commit a4d5613c4dc6, which altered the semantics of the pfn_valid() function. This change allows for the possibility of a valid page being referenced that is reserved but not mapped by the kernel. As a result, during certain user-space I/O tests, the system may crash, leading to a kernel panic. The crash occurs when the kernel attempts to access a virtual address that is not valid, causing a fatal exception.
How To Fix
Minimum fixed version
6.7.12-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users should check if the PG_reserved flag is set for the memory pages being accessed. This can help prevent the kernel from attempting to access invalid memory addresses, thus avoiding potential crashes.
Conclusion
The CVE-2024-26947 vulnerability in the Linux kernel poses a significant risk of system crashes due to improper memory handling. Users are strongly advised to update to the patched version to mitigate this risk. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2024-26947 is a vulnerability in the Linux kernel that can lead to system crashes due to improper handling of reserved memory addresses.
The vulnerability affects the Linux package in Debian 13 and Debian 14 prior to version 6.7.12-1.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider implementing the workaround by checking the PG_reserved flag for memory pages.
Detailed information can be found in the official Debian CVE database or by reviewing the commit history related to the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
