Shift-Out-of-Bounds Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-50139: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shift-out-of-bounds bug reported by UBSAN when running VM with MTE enabled host kernel. Affects linux versions < 6.11.6-1. Fixed in 6.11.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are critical, as vulnerabilities can lead to severe consequences, including system crashes or unauthorized access. This specific vulnerability affects the KVM (Kernel-based Virtual Machine) component of the Linux kernel, which allows users to run virtual machines on Linux hosts.
Vulnerability Detail
In the Linux kernel, a shift-out-of-bounds bug was identified in the KVM module for arm64 architecture. This vulnerability arises when running a virtual machine with Memory Tagging Extension (MTE) enabled. The issue is triggered by a shift operation where the shift exponent exceeds the bounds of the data type, specifically when the exponent is 33 for a 32-bit integer. This can lead to unexpected behavior, including potential crashes or security breaches, as it may allow for the execution of arbitrary code or manipulation of system resources.
How To Fix
Minimum fixed version
6.11.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to avoid enabling MTE in their virtual machines until the system is updated to the patched version.
Conclusion
The shift-out-of-bounds vulnerability in the Linux kernel's KVM module poses significant risks to system stability and security. Users are strongly encouraged to update their kernel to the patched version 6.11.6-1 to protect against potential exploits. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a shift-out-of-bounds bug in the KVM module of the Linux kernel, which can lead to system instability and potential security risks.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring access to the code.
If exploited, this vulnerability could lead to system crashes, unauthorized access, or execution of arbitrary code, compromising the security of the affected systems.
Yes, the vulnerability affects versions prior to 6.11.6-1. Users should update to this version or later to mitigate the risk.
If an immediate update is not possible, consider disabling MTE in your virtual machines as a temporary measure until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
