Memory Leak Vulnerability in Linux Kernel - Debian Packages
Summary
DEBIAN-CVE-2024-50084: In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e45156ad ("net: microchip: vcap: Fix use-after-free error in kunit... Affects linux versions < 6.11.5-1. Fixed in 6.11.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is crucial for system stability and performance. The recent vulnerability affects Debian versions 13 and 14, specifically in the Linux package, which is fundamental for system operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the net: microchip: vcap API, which leads to memory leaks in the function vcap_api_encode_rule_test(). The issue originated from a fix for a use-after-free error that inadvertently removed necessary memory management calls, resulting in unreferenced objects persisting in memory. This can lead to increased memory consumption and potential system instability over time, especially in environments where the affected function is frequently called.
How To Fix
Minimum fixed version
6.11.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The memory leak vulnerability in the Linux kernel affects Debian versions 13 and 14, posing risks of increased memory usage and system instability. Users are advised to update to the patched version 6.11.5-1 to mitigate these risks. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak in the Linux kernel that can lead to increased memory usage and potential system instability.
Debian versions 13 and 14 are affected by this vulnerability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.11.5-1 of the Linux package.
While there are no specific workarounds, it is crucial to monitor your system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
