Unmap Leak Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-27066: In the Linux kernel, the following vulnerability has been resolved: virtio: packed: fix unmap leak for indirect desc table When use_dma_api and premapped are true, then the do_unmap is false. Affects linux versions < 6.7.12-1. Fixed in 6.7.12-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used in various environments, from servers to embedded systems. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the virtio subsystem, which is used for efficient I/O virtualization.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the virtio subsystem that leads to an unmap leak for the indirect descriptor table. When both use_dma_api and premapped are set to true, the do_unmap flag is false, preventing the vring_unmap_extra_packed function from being called. This results in the indirect descriptor table not being unmapped, causing a memory leak. Although this bug does not currently affect any drivers using the premapped with indirect, it poses a potential risk if such configurations are implemented in the future.
How To Fix
Minimum fixed version
6.7.12-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The unmap leak vulnerability in the Linux kernel's virtio subsystem presents a potential risk for memory leaks. Users are encouraged to update to the patched version 6.7.12-1 to mitigate this issue. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an unmap leak in the virtio subsystem of the Linux kernel, which can lead to memory leaks under certain conditions.
The vulnerability affects the Linux kernel in Debian 13 and 14 prior to version 6.7.12-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Check your application against the vulnerability using the Vulert playground at Vulert Scanner.
While there are no specific workarounds, it is advisable to monitor the situation and apply the patch as soon as possible to mitigate any potential risks.
While the bug does not currently affect any drivers using the premapped with indirect, it poses a potential risk and should be addressed promptly.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
