Critical NULL Pointer Dereference in Linux Kernel - RISC-V KVM Snapshot Area
Summary
DEBIAN-CVE-2024-47717: In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU... Affects linux versions < 6.11.2-1. Fixed in 6.11.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to applications. It supports various architectures, including RISC-V, and is widely used in both server and embedded systems. This vulnerability affects the KVM (Kernel-based Virtual Machine) functionality, specifically when handling PMU (Performance Monitoring Unit) snapshot areas during guest VM operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that leads to a NULL pointer dereference when the SBI PMU snapshot is enabled for a guest VM and the VM is forcefully powered off. This issue arises from the improper handling of the PMU snapshot area, which can cause a crash in the kernel, potentially leading to system instability or data loss. The crash occurs in the kvm_vcpu_write_guest() function, triggered by the kvm_pmu_clear_snapshot_area() during the teardown of the guest VM.
How To Fix
Minimum fixed version
6.11.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to systems utilizing RISC-V architecture with KVM enabled. It is essential to update to the patched version 6.11.2-1 to mitigate the risk of system crashes and instability. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the Linux kernel's KVM functionality, which can lead to system crashes.
The vulnerability affects Linux kernel versions prior to 6.11.2-1.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential system instability.
Yes, this vulnerability specifically affects the RISC-V architecture within the KVM functionality of the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
