Invalid Memory Access Vulnerability in Linux Kernel: linux Package
Summary
DEBIAN-CVE-2024-43847: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the same ring mask index. Affects linux versions < 6.10.3-1. Fixed in 6.10.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The linux package is a core component of the Debian operating system, providing the Linux kernel that serves as the foundation for the system's functionality. It manages hardware resources, facilitates communication between software and hardware, and supports various system processes. The kernel is crucial for system stability and performance, making its security paramount. This vulnerability specifically affects the ath12k driver, which is responsible for wireless communication in certain hardware configurations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ath12k driver related to the handling of fragmented packets. The issue arises from the monitor ring and the reo reinject ring sharing the same ring mask index. When an interrupt is received for the reo reinject ring, it inadvertently processes the monitor ring, leading to invalid memory access. This can result in system instability or crashes, particularly since monitor support is not yet enabled in ath12k. The vulnerability has been assigned the ID DEBIAN-CVE-2024-43847 and affects Debian versions 13 and 14.
How To Fix
Minimum fixed version
6.10.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available to prevent any potential exploitation.
Conclusion
The invalid memory access vulnerability in the Linux kernel's ath12k driver poses a significant risk to system stability. Users are urged to update their linux package to the patched version 6.10.3-1 to mitigate this risk. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves invalid memory access due to improper handling of interrupts in the ath12k driver.
The vulnerability affects Debian versions 13 and 14 of the linux package prior to version 6.10.3-1.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability could lead to system crashes or instability due to invalid memory access.
Yes, a patch is available in version 6.10.3-1 of the linux package. It is recommended to update to this version or later.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
