Critical Vulnerability in Linux Package: IPsec RoCE MPV Trace Call Issue
Summary
DEBIAN-CVE-2024-45017: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent the call trace below from happening, by not allowing IPsec creation over a slave, if master device doesn... Affects linux versions < 6.10.7-1. Fixed in 6.10.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used in various environments, from personal computers to servers. The package is known for its stability and performance, but like any software, it can be susceptible to vulnerabilities that may compromise system integrity and security.
Vulnerability Detail
A vulnerability has been identified in the Linux kernel related to the net/mlx5 module, specifically concerning the IPsec RoCE MPV trace call. This issue arises when IPsec creation is attempted over a slave device without the master device supporting IPsec. The vulnerability can lead to unexpected behavior and potential system crashes, as indicated by the call trace generated during the failure. The issue was introduced in earlier versions and has been fixed in version 6.10.7-1.
How To Fix
Minimum fixed version
6.10.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with the vulnerability.
Conclusion
The vulnerability identified in the Linux package related to the IPsec RoCE MPV trace call poses significant risks to system stability and security. Users are strongly encouraged to update to the latest patched version to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to the IPsec RoCE MPV trace call in the Linux kernel, which can lead to system crashes if IPsec is created over unsupported devices.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability can cause unexpected behavior and crashes in the system, potentially leading to denial of service.
Yes, a patch is available in version 6.10.7-1 of the Linux package. Users should update to this version to resolve the issue.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to ensure system security.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
