Memory Deallocation Issue in Linux Kernel: linux Package Vulnerability
Summary
DEBIAN-CVE-2024-49972: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Deallocate DML memory if allocation fails [Why] When DC state create DML memory allocation fails, memory is not deallocated subsequentl... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It is responsible for enabling the execution of applications and ensuring system stability. This vulnerability affects versions of the linux package in Debian 13 and 14, specifically related to the Direct Rendering Manager (DRM) for AMD graphics, which can lead to memory management issues.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Direct Rendering Manager (DRM) for AMD graphics. When the state creation process for Display Command (DC) fails to allocate DML memory, the allocated memory is not deallocated. This results in an uninitialized structure that is not NULL, potentially leading to undefined behavior and security risks, such as memory leaks or crashes.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the linux package of the Debian operating system poses significant risks related to memory management in the Linux kernel. It is crucial for users to update their systems to the patched version to mitigate these risks and ensure system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper memory management in the Linux kernel's DRM for AMD graphics, leading to potential security risks.
The vulnerability affects the linux package in Debian 13 and 14, specifically versions prior to 6.11.4-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is available in version 6.11.4-1 of the linux package. It is recommended to update to this version.
Failure to address this vulnerability may lead to memory leaks, crashes, or other undefined behaviors that could compromise system stability and security.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
