Refcount Underflow Vulnerability in Linux Kernel: Affects Debian Packages
Summary
DEBIAN-CVE-2024-49940: In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various distributions, including Debian. This vulnerability specifically affects the Linux kernel versions in Debian 13 and 14, highlighting a flaw in the L2TP (Layer 2 Tunneling Protocol) implementation that could lead to potential security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability exists in the L2TP implementation where a session's backpointer to its tunnel can lead to a reference count underflow. When a session is created, it sets a backpointer to its tunnel before the tunnel's reference count is incremented. This creates a small window where the session's tunnel reference is non-NULL, but the tunnel's reference count has not been increased, potentially allowing for race conditions and security issues when handling L2TPv3 sessions with colliding IDs.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The L2TP reference count underflow vulnerability in the Linux kernel poses a significant risk to systems running Debian 13 and 14. Users are strongly advised to update their kernel to the patched version 6.11.4-1 to ensure their systems remain secure. Monitoring tools like Vulert can assist in identifying vulnerabilities in open-source software.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a reference count underflow in the L2TP implementation of the Linux kernel, which can lead to potential security risks.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
If exploited, this vulnerability could allow unauthorized access or manipulation of L2TP sessions, leading to security breaches.
Yes, the patched version of the Linux kernel is 6.11.4-1 for both Debian 13 and 14.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
