Memory Leak Vulnerability in Linux Kernel Package: linux (Debian 13 & 14)
Summary
DEBIAN-CVE-2024-50068: In the Linux kernel, the following vulnerability has been resolved: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() The sysfs_target->regions allocated in damon_sysfs_regions_alloc() is no... Affects linux versions < 6.11.5-1. Fixed in 6.11.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. This vulnerability affects the 'linux' package in Debian versions 13 and 14, highlighting a memory management issue that can lead to resource leaks.
Vulnerability Detail
In the Linux kernel, specifically within the mm/damon/tests/sysfs-kunit.h file, a memory leak has been identified in the damon_sysfs_test_add_targets() function. The sysfs_target->regions allocated in damon_sysfs_regions_alloc() are not properly freed, resulting in unreferenced memory objects. This can lead to increased memory consumption over time, potentially affecting system performance and stability. The vulnerability was introduced in version 0 and has been fixed in version 6.11.5-1.
How To Fix
Minimum fixed version
6.11.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the package.
Conclusion
The memory leak vulnerability in the Linux kernel's 'linux' package for Debian versions 13 and 14 poses a risk of increased memory consumption. Users are advised to update to the patched version 6.11.5-1 to mitigate this issue. Regular monitoring with tools like Vulert can help ensure that your system remains secure against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak in the Linux kernel that occurs due to unfreed memory allocations in the damon_sysfs_test_add_targets() function.
The vulnerability affects the 'linux' package in Debian versions 13 and 14.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. You can check your application against this vulnerability using the Vulert playground without any signup.
If left unaddressed, the memory leak can lead to increased memory usage, which may degrade system performance and stability over time.
Yes, a patch is available in version 6.11.5-1 of the 'linux' package. It is recommended to update to this version.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
