Critical UAF Vulnerability in Linux Kernel's i915 Module
Summary
DEBIAN-CVE-2024-39479: In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon and hwmon drvdata (on which hwmon depends) are device managed resources, the expectation, on device unbi... Affects linux versions < 6.9.7-1. Fixed in 6.9.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. The i915 module specifically handles Intel graphics hardware, providing essential functionality for rendering graphics. This module is crucial for systems utilizing Intel integrated graphics, and vulnerabilities within it can lead to severe security risks, including unauthorized access and system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the i915 module related to the improper management of device resources. Specifically, when both hwmon and hwmon drvdata are device-managed resources, the unbinding process does not guarantee the correct order of resource release. This can lead to a use-after-free (UAF) condition, where hwmon sysfs may be accessed after drvdata has been released, potentially allowing an attacker to exploit this flaw and execute arbitrary code or crash the system.
How To Fix
Minimum fixed version
6.9.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can avoid using device-managed resources in the i915 module until the patch is applied. This may involve modifying the code to manually manage resource allocation and deallocation, ensuring that hwmon is released before drvdata during the unbinding process.
Conclusion
The vulnerability in the Linux kernel's i915 module poses significant risks due to improper resource management, leading to potential use-after-free conditions. Users are strongly advised to update to the patched version to mitigate these risks and ensure system stability.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to access the code.
The risks include unauthorized access to system resources, potential data breaches, and system crashes, which can compromise the integrity and availability of the affected systems.
Yes, you can avoid using device-managed resources in the i915 module as a temporary measure until the patch is applied.
Detailed information can be found in the official Debian security advisories and the vulnerability report on the Debian OSV database.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
