Critical Vulnerability in Linux Kernel: PMC Core I/O Unmap Issue
Summary
DEBIAN-CVE-2024-50107: In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses Commit 50c6dbdfd16e ("x86/ioremap: Improve iounmap() address range chec... Affects linux versions < 6.11.6-1. Fixed in 6.11.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. However, a recent vulnerability has been identified that affects the kernel's handling of memory mapping, specifically in the platform/x86/intel/pmc module, which could lead to system instability and security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the pmc_core_iounmap function, which fails to properly validate address ranges before calling iounmap. This issue was introduced in commit 50c6dbdfd16e, leading to warnings on systems like the Thinkpad P1 Gen 7 (Meteor Lake-P). If exploited, this vulnerability could cause system crashes or unexpected behavior, potentially allowing attackers to gain unauthorized access or disrupt services.
How To Fix
Minimum fixed version
6.11.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid triggering the vulnerability by not using the affected modules until the kernel is updated. Monitoring system logs for warnings related to iounmap can also help identify potential issues.
Conclusion
The vulnerability in the Linux kernel's pmc_core_iounmap function poses significant risks to system stability and security. Users are strongly advised to update to the patched version to mitigate these risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in real-time without requiring extensive setup.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system instability, crashes, and potential unauthorized access if exploited.
You can check your kernel version with the command 'uname -r' and compare it to the patched version 6.11.6-1.
Yes, tools like Vulert can monitor your project for open-source vulnerabilities using just a manifest file.
Consider using the affected modules minimally and monitor system logs for any warnings related to iounmap.
Detailed information can be found in the CVE database and through the Debian security advisories.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
