Critical PCI Allocation Failure in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2024-34030: In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a NULL pointer de... Affects linux versions < 6.9.7-1. Fixed in 6.9.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is a critical piece of software that ensures system stability and performance. The vulnerability in question affects Debian versions 13 and 14 of the Linux kernel, specifically related to PCI (Peripheral Component Interconnect) property handling, which can lead to system instability if not addressed.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the PCI subsystem where the function of_pci_prop_intr_map() fails to handle memory allocation errors correctly. If the kcalloc() function fails, it returns a NULL pointer, which can lead to a NULL pointer dereference. This vulnerability can potentially cause system crashes or unexpected behavior, impacting the overall stability and security of the operating system.
How To Fix
Minimum fixed version
6.9.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate any potential risks.
Conclusion
The vulnerability identified in the Linux kernel regarding PCI property handling poses a significant risk to Debian users. It is essential to update to the patched version (6.9.7-1) to ensure system stability and security. Regular monitoring and timely updates are crucial in maintaining a secure operating environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to improper handling of memory allocation failures in the PCI subsystem of the Linux kernel, which can lead to system crashes.
Debian versions 13 and 14 are affected by this vulnerability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
While the primary risk is system instability, it is always advisable to back up important data regularly to prevent any potential loss.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
