High Priority Group Creation Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-46837: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on group_create We were allowing any users to create a high priority group without any permission checks. Affects linux versions < 6.10.11-1. Fixed in 6.10.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It manages system resources and allows applications to communicate with hardware components. The kernel is crucial for system stability and performance. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the DRM (Direct Rendering Manager) subsystem, which handles graphics processing.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the DRM subsystem, specifically in the panthor group creation functionality. This issue allowed any user to create a high-priority group without proper permission checks, potentially leading to a denial of service. The vulnerability arises from insufficient validation of user permissions when setting group priorities, which could be exploited by malicious users to disrupt system operations. The vulnerability has been addressed by restricting high priority group creation to only the DRM master or users with the CAP_SYS_NICE capability.
How To Fix
Minimum fixed version
6.10.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the kernel to the fixed version.
Conclusion
The identified vulnerability in the Linux kernel's DRM subsystem poses a significant risk by allowing unauthorized high-priority group creation. It is crucial for users to update their systems to the patched version 6.10.11-1 to mitigate this risk. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows unauthorized users to create high-priority groups in the DRM subsystem, potentially leading to denial of service.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to 6.10.11-1.
You can check your system's kernel version by running 'uname -r' in the terminal. If it is below 6.10.11-1, it is affected.
While there are no specific workarounds, it is recommended to monitor your system for any unusual activity until you can apply the update.
More information can be found in the official Debian security advisories or by visiting the Vulert website, which monitors open-source vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
