Kernel Vulnerability in Linux Package: NFS Trace Event Handling Issue
Summary
DEBIAN-CVE-2024-43826: In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without having the folio locked and a check for a NULL ->f_mapping tha... Affects linux versions < 6.10.3-1. Fixed in 6.10.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including file systems, networking, and process management. The kernel is crucial for system stability and performance. This specific vulnerability affects the NFS (Network File System) trace events, which are used for monitoring and debugging NFS operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the handling of NFS trace events. The issue arises from the use of nfs_folio_length without ensuring that the folio is locked and that there is a check for a NULL ->f_mapping. This oversight can lead to kernel crashes, particularly when running specific tests (e.g., xfstests generic/065) with all NFS trace points enabled. The vulnerability stems from the need for explicit offset and count parameters in trace events, which can enhance accuracy and prevent potential truncations.
How To Fix
Minimum fixed version
6.10.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid enabling all NFS trace points during testing to mitigate the risk of kernel crashes until the package is updated.
Conclusion
The identified vulnerability in the Linux kernel regarding NFS trace events poses a significant risk of kernel crashes. It is crucial for users to update to the patched version 6.10.3-1 to ensure system stability and security. Temporary workarounds can be employed until the update is applied.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves unsafe handling of NFS trace events in the Linux kernel, which can lead to kernel crashes.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
If exploited, this vulnerability can cause kernel crashes, leading to system instability and potential data loss.
Yes, a patch is available in version 6.10.3-1 of the Linux package. Users should update to this version to resolve the issue.
If immediate updating is not possible, consider disabling NFS trace points during testing to reduce the risk of crashes.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
