Critical Vulnerability in Linux Kernel: Namespace RBTree Node Removal Issue
Summary
DEBIAN-CVE-2024-50204: In the Linux kernel, the following vulnerability has been resolved: fs: don't try and remove empty rbtree node When copying a namespace we won't have added the new copy into the namespace rbtree until after the copy succ... Affects linux versions < 6.11.6-1. Fixed in 6.11.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other parts of the operating system. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the handling of namespace RBTree nodes, which are crucial for managing namespaces in the system.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where the system attempts to remove an empty RBTree node when copying a namespace. This occurs because the new copy is not added to the namespace RBTree until after the copy operation succeeds. If free_mnt_ns() is called prematurely, it will attempt to remove a non-existent copy from the RBTree, leading to potential system instability or crashes. This issue is critical as it can affect the stability of the kernel and the overall system performance.
How To Fix
Minimum fixed version
6.11.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to system stability and performance. It is crucial for users of Debian 13 and 14 to update to the patched version 6.11.6-1 to ensure their systems remain secure. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves an improper attempt to remove an empty RBTree node in the Linux kernel during namespace copying.
The vulnerability affects Linux kernel versions in Debian 13 and 14 prior to the fixed version 6.11.6-1.
If exploited, this vulnerability could lead to system instability or crashes, affecting the performance of applications relying on the kernel.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is advisable to monitor the situation and apply the update as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
