Critical Vulnerability in Linux Kernel: idpf_get_link_ksettings Access Issue
Summary
DEBIAN-CVE-2024-50274: In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is removed or the platform running device control plane is rebooted, a... Affects linux versions < 6.11.9-1. Fixed in 6.11.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting the kernel's functionality and the overall system security. This specific vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the idpf driver, which manages network devices.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the idpf driver concerning the function idpf_get_link_ksettings. When the device control plane is removed or rebooted, a reset is detected, leading to resource release. If this reset fails, the driver releases the vport lock, which can result in call traces when monitoring tools attempt to access link settings using a released vport pointer. This flaw could lead to system instability or crashes if exploited.
How To Fix
Minimum fixed version
6.11.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate potential risks.
Conclusion
The identified vulnerability in the Linux kernel's idpf driver poses significant risks to system stability and security. It is essential for users of Debian 13 and 14 to update to the patched version 6.11.9-1 to mitigate these risks. Regular monitoring and prompt updates are crucial for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper access to the vport pointer in the idpf driver, which can lead to system instability.
The vulnerability affects Linux kernel versions in Debian 13 and 14 prior to version 6.11.9-1.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any installation.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to ensure system security.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-50274.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
