Critical Vulnerability in Linux Kernel: Out-of-Bounds Write in netif_queue_set_napi
Summary
DEBIAN-CVE-2024-46766: In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi() is called from ice_vsi_rebuild() that is not rtnl-locked whe... Affects linux versions < 6.10.11-1. Fixed in 6.10.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel is crucial for system stability and performance, and vulnerabilities within it can lead to severe security risks. This specific vulnerability affects the Linux kernel versions prior to 6.10.11-1, particularly in Debian 13 and 14 distributions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ice driver related to the netif_queue_set_napi function. This function is called from ice_vsi_rebuild without proper locking mechanisms, leading to potential out-of-bounds writes. This could allow an attacker to exploit the vulnerability, resulting in system crashes or unauthorized access to sensitive data. The vulnerability arises from improper handling of the napi-to-queue information, which can lead to memory corruption and instability in the kernel.
How To Fix
Minimum fixed version
6.10.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds recommended for this vulnerability other than applying the patch as soon as it becomes available.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability and security. Users are urged to update their systems to the latest patched version to mitigate these risks. Regular monitoring and updates are essential for maintaining a secure operating environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an out-of-bounds write issue in the netif_queue_set_napi function, which can lead to memory corruption.
The vulnerability affects Linux kernel versions prior to 6.10.11-1 in Debian 13 and 14.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to system crashes, unauthorized access to sensitive data, or other security breaches.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
