Deadlock Vulnerability in Linux Kernel: Mitigation Required for Package 'linux'
Summary
DEBIAN-CVE-2024-27010: In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to s... Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The 'linux' package is a core component of the Debian operating system, providing the Linux kernel that manages system resources and hardware interactions. It is essential for the operation of various applications and services. The kernel is responsible for process management, memory management, device drivers, and system calls, making it a critical element in maintaining system stability and performance. However, vulnerabilities in the kernel can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
In the Linux kernel, a deadlock vulnerability has been identified in the net/sched subsystem, specifically related to the mirred action used on classful egress qdiscs. When a packet is mirrored or redirected to the same device, it can cause a qdisc lock deadlock. This occurs when a task attempts to acquire a lock that it already holds, leading to a situation where the system cannot proceed. The vulnerability can result in system instability and potential denial of service, as the affected processes may hang indefinitely.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the mirred action on classful egress qdiscs until the package is updated. This can prevent the deadlock scenario from occurring while you wait for the patch to be applied.
Conclusion
The deadlock vulnerability in the Linux kernel poses significant risks to system stability and security. It is crucial for users of the 'linux' package on Debian systems to update to the patched version 6.8.9-1 to mitigate these risks. In the meantime, users should refrain from using the mirred action on classful egress qdiscs to avoid triggering the deadlock scenario.
See every vulnerability recorded for linux →
FAQ
The deadlock vulnerability occurs when a task tries to acquire a lock that it already holds, leading to a situation where the system cannot proceed.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The consequences include system instability, potential denial of service, and hanging processes, which can disrupt normal operations.
Yes, the vulnerability is fixed in version 6.8.9-1 of the 'linux' package. Updating to this version or later is essential.
If an immediate update is not possible, avoid using the mirred action on classful egress qdiscs as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
