Critical Vulnerability in Linux Package: Double DMA Unmapping Issue
Summary
DEBIAN-CVE-2024-44984: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT Remove the dma_unmap_page_attrs() call in the driver's XDP_REDIRECT code path. Affects linux versions < 6.10.7-1. Fixed in 6.10.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used in various environments, including servers and desktops. This package is crucial for system stability and performance, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the bnxt_en driver, specifically a double DMA unmapping issue for the XDP_REDIRECT code path. This flaw arises from an improper handling of DMA mappings, leading to potential system instability and warnings during operation. The bug can trigger warnings in the system logs, indicating issues with memory management and could potentially lead to crashes or degraded performance.
How To Fix
Minimum fixed version
6.10.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The recommended action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux package poses a significant risk to system stability and performance. Users are urged to update to the patched version 6.10.7-1 to mitigate this risk. Regular monitoring and updates are essential to maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a double DMA unmapping issue in the bnxt_en driver, which can lead to system warnings and potential instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Failure to address this vulnerability may result in system instability, performance degradation, and potential crashes.
Yes, the vulnerability is fixed in version 6.10.7-1 and later.
It is advisable to regularly check for updates, at least once a month, or whenever a new vulnerability is reported.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
