Critical Memory Management Vulnerability in Linux Kernel - CVE-2024-46789
Summary
DEBIAN-CVE-2024-46789: In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook When enable CONFIG_MEMCG & CONFIG_KFENCE & CONFIG_KMEMLEAK, the following warning al... Affects linux versions < 6.10.11-1. Fixed in 6.10.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to applications. It supports various functionalities, including memory management, process scheduling, and device control. This vulnerability affects the memory management subsystem, specifically the SLUB allocator, which is used for dynamic memory allocation in the kernel. The issue arises when specific kernel configurations are enabled, leading to potential system instability and security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the memory management subsystem, specifically within the SLUB allocator. When the kernel is configured with CONFIG_MEMCG, CONFIG_KFENCE, and CONFIG_KMEMLEAK, a warning is triggered due to improper handling of memory allocation tags. This occurs during the allocation and deallocation of memory objects, leading to potential memory corruption and system crashes. The root cause is a failure to check certain flags in the allocation process, which can result in the system invoking an incorrect memory management path, ultimately causing warnings and instability.
How To Fix
Minimum fixed version
6.10.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
CVE-2024-46789 represents a significant vulnerability in the Linux kernel's memory management subsystem, which can lead to system instability and security risks. Users are strongly encouraged to update to the patched versions of the kernel to ensure their systems remain secure. For real-time monitoring of open-source vulnerabilities, consider using Vulert, which can help you stay informed about potential threats.
See every vulnerability recorded for linux →
FAQ
CVE-2024-46789 is a vulnerability in the Linux kernel's memory management subsystem that can lead to system instability and security risks when certain configurations are enabled.
If your system is running a vulnerable version of the Linux kernel with specific configurations enabled, it may experience warnings, memory corruption, or crashes.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring installation.
Yes, a patch is available in the form of updated kernel versions 6.10.11-1 for both Debian 13 and Debian 14.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to the patched version to mitigate risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
