Kernel Panic Vulnerability in Linux Package: idpf Driver Packet Handling Issue
Summary
DEBIAN-CVE-2024-35889: In the Linux kernel, the following vulnerability has been resolved: idpf: fix kernel panic on unknown packet types In the very rare case where a packet type is unknown to the driver, idpf_rx_process_skb_fields would retu... Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including process management, memory management, and device control. The idpf driver is a network driver within the kernel that handles packet processing. This vulnerability arises from improper handling of unknown packet types, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the idpf driver where the function idpf_rx_process_skb_fields fails to handle unknown packet types correctly. When an unknown packet is received, the function returns early without invoking eth_type_trans, which is responsible for setting the skb protocol and the network layer handler. This oversight can lead to a kernel panic, particularly when tools like tcpdump are running, resulting in system crashes and loss of service. The vulnerability is present in both Debian 13 and 14 versions of the Linux package, with a fixed version available.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The vulnerability in the Linux kernel's idpf driver poses a significant risk of kernel panic due to improper handling of unknown packet types. It is crucial for users of Debian 13 and 14 to update to the patched version 6.8.9-1 to mitigate this risk. Regular monitoring and prompt updates are essential for maintaining system stability.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to improper handling of unknown packet types in the idpf driver, which can cause kernel panic.
Debian 13 and 14 versions of the Linux package are affected by this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the patch as soon as possible.
Failure to address this vulnerability may lead to system crashes, data loss, and service interruptions, particularly when handling network packets.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
