Critical Null Pointer Dereference Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-47688: In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in module_add_driver() Inject fault while probing of-fpga-region, if kasprintf() fails in module_add_driver(... Affects linux versions < 6.11.2-1. Fixed in 6.11.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including Debian, providing essential services for hardware and software interaction. It manages system resources and facilitates communication between hardware and software components. The kernel is crucial for system stability and performance, and vulnerabilities within it can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
A critical vulnerability has been identified in the Linux kernel related to the driver core, specifically in the module_add_driver() function. This issue arises when the kasprintf() function fails during the probing of an FPGA region, leading to a potential null pointer dereference. The second sysfs_remove_link() call in the exit path can trigger a null pointer dereference because the kernfs_name_hash() function attempts to call strlen() with a NULL driver_name. This can result in a kernel panic, causing the system to become unresponsive and potentially leading to data loss or unauthorized access.
How To Fix
Minimum fixed version
6.11.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to update to the patched version as soon as it becomes available.
Conclusion
The identified null pointer dereference vulnerability in the Linux kernel poses a significant risk to system stability and security. Users are strongly advised to update to the patched version to mitigate potential threats. Regular monitoring and updating of software packages are essential practices for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
A null pointer dereference occurs when a program attempts to access memory at a location that is not valid, leading to crashes or unexpected behavior.
Exploitation of this vulnerability can lead to kernel panics, causing system crashes and potential data loss, as well as creating opportunities for unauthorized access.
If you are using Debian versions 13 or 14 with the Linux kernel prior to version 6.11.2-1, your system is vulnerable. You can check your kernel version using the command 'uname -r'.
It is recommended to regularly check for updates to your Linux kernel and other packages to ensure that you have the latest security patches and features.
Vulert is a tool that can help monitor and alert in real-time for open-source vulnerabilities in your software. You can use the Vulert playground to check if your application is affected by this vulnerability without needing to sign up.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
