Kernel Crash Vulnerability in Linux Package: CVE-2024-40979
Summary
DEBIAN-CVE-2024-40979: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA r... Affects linux versions < 6.9.7-1. Fixed in 6.9.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, responsible for managing system resources and hardware interactions. It provides essential functionalities such as process management, memory management, and device control. The vulnerability identified as CVE-2024-40979 affects the ath12k driver, which is responsible for handling wireless communication in certain hardware configurations. This vulnerability can lead to system instability and crashes during the resume process from suspend mode.
Vulnerability Detail
In the Linux kernel, specifically within the ath12k driver, a vulnerability exists that can cause a kernel crash during the resume process. This issue arises when the QMI target memory is not properly handled, particularly in systems where DMA remap is not supported. The failure to allocate memory correctly can lead to a bad page state, resulting in a crash. The vulnerability is triggered when the firmware requests large memory segments, and if the allocation fails, it can lead to freeing memory that is still in use, causing the kernel to crash.
How To Fix
Minimum fixed version
6.9.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can avoid putting their systems into suspend mode until the patch is applied to prevent potential crashes.
Conclusion
The CVE-2024-40979 vulnerability in the Linux kernel poses a significant risk of kernel crashes during the resume process from suspend mode. Users are strongly encouraged to update their Linux package to the patched version 6.9.7-1 to mitigate this risk. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software environment.
See every vulnerability recorded for linux →
FAQ
CVE-2024-40979 is a vulnerability in the Linux kernel that can cause a kernel crash during the resume process from suspend mode due to improper handling of QMI target memory.
This vulnerability can lead to system instability and crashes, particularly when resuming from suspend mode, which may result in data loss or corruption.
If you are using the affected versions of the Linux package prior to 6.9.7-1, your system may be vulnerable. You can check your package version using 'apt list --installed | grep linux'.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner.
If you cannot update your package immediately, it is advisable to avoid using the suspend feature on your system to prevent potential crashes until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
