Out of Bounds Access Vulnerability in Linux Kernel - Package: linux
Summary
DEBIAN-CVE-2024-49984: In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset exten... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is known for its stability and performance. However, like any complex software, it can be susceptible to vulnerabilities that may compromise system security and functionality.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/v3d module, which allows for out-of-bounds access during performance query extensions. This issue arises when the number of performance monitors (perfmons) that userspace is attempting to pass in the copy and reset extensions exceeds the internal kernel storage capacity. If exploited, this vulnerability could lead to unauthorized access to memory, potentially allowing an attacker to execute arbitrary code or crash the system.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's drm/v3d module poses a significant risk due to potential out-of-bounds memory access. Users are strongly advised to update their linux package to the patched version 6.11.4-1 to mitigate this risk. Regular updates and monitoring tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an out-of-bounds access issue in the Linux kernel's drm/v3d module, which can lead to memory access violations.
Exploitation of this vulnerability could allow attackers to access unauthorized memory, potentially leading to system crashes or arbitrary code execution.
If you are using the linux package version prior to 6.11.4-1, your system may be vulnerable. You can check your package version using 'apt list --installed | grep linux'.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure against known vulnerabilities.
Vulert is a useful tool that can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can also use the Vulert playground to check if your application is affected by this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
