Critical Vulnerability in Linux Kernel: Improper Reference Count Handling in DMA Engine
Summary
DEBIAN-CVE-2024-40991: In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() The of_k3_udma_glue_parse_chn_by_id() helper function erroneously invokes "of_node_pu... Affects linux versions < 6.9.7-1. Fixed in 6.9.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resource allocation. It is widely used in various environments, from servers to embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to severe system compromises. This specific vulnerability affects the DMA engine, particularly the ti: k3-udma-glue component, which is responsible for managing direct memory access operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the dmaengine component, specifically within the of_k3_udma_glue_parse_chn_by_id() helper function. This function incorrectly calls 'of_node_put()' on the 'udmax_np' device-node without incrementing its reference count. This oversight can lead to a use-after-free condition, potentially allowing an attacker to exploit the system by manipulating memory references, leading to system instability or unauthorized access.
How To Fix
Minimum fixed version
6.9.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the package as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability identified in the Linux kernel's DMA engine poses significant risks due to improper reference count handling. Users are strongly advised to update their systems to the patched version to ensure security and stability. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper handling of reference counts in the DMA engine, which can lead to memory management issues.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Exploiting this vulnerability could lead to system crashes, unauthorized access, or other malicious activities due to memory corruption.
Yes, a patch is available in version 6.9.7-1 of the Linux package. Updating to this version will resolve the issue.
While there are no specific workarounds, it is crucial to prioritize updating your system to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
