Memory Leak Vulnerability in Linux Package: CVE-2024-50214
Summary
DEBIAN-CVE-2024-50214: In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() modprobe drm_connector_test and then rmmod drm_connector_test, the following mem... Affects linux versions < 6.11.7-1. Fixed in 6.11.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient operation and performance. The package is frequently updated to address security vulnerabilities, improve performance, and enhance compatibility with new hardware. However, vulnerabilities like CVE-2024-50214 can pose significant risks, leading to memory leaks that may affect system stability and performance.
Vulnerability Detail
CVE-2024-50214 is a memory leak vulnerability found in the Linux kernel, specifically within the drm/connector module. This issue arises when the function drm_display_mode_from_cea_vic() allocates memory for a display mode but fails to free it upon completion. As a result, unreferenced memory objects accumulate, leading to potential system resource exhaustion. The vulnerability can be exploited during the loading and unloading of the drm_connector_test module, causing memory leaks that may degrade system performance over time.
How To Fix
Minimum fixed version
6.11.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability aside from applying the patch. Users are advised to monitor their systems for unusual memory usage and consider temporarily disabling the drm_connector_test module if it is not essential for their operations.
Conclusion
CVE-2024-50214 represents a critical memory leak vulnerability in the Linux kernel that can affect system performance. Users are encouraged to update their Linux packages to the latest patched version to mitigate the risks associated with this vulnerability. Regular monitoring and utilizing tools like Vulert can help maintain system security and performance.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50214 is a memory leak vulnerability in the Linux kernel's drm/connector module that can lead to resource exhaustion.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to memory leaks, which may degrade system performance and stability over time, especially under heavy load.
Yes, a patch is available in version 6.11.7-1 of the Linux package. Users should update to this version or later.
If immediate updates are not possible, monitor your system for unusual memory usage and consider disabling the drm_connector_test module temporarily.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
