Duplicate kmem_cache Creation Vulnerability in Linux Package
Summary
DEBIAN-CVE-2024-53065: In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create Commit b035f5a6d852 ("mm: slab: reduce the kmalloc() minimum alignme... Affects linux versions < 6.11.9-1. Fixed in 6.11.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It is crucial for system stability and performance, supporting various architectures and functionalities. This vulnerability specifically affects the memory management subsystem of the Linux kernel, where improper handling of memory cache creation can lead to system warnings and potential instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the memory management subsystem, specifically in the slab allocator. The issue arises from a commit that reduced the minimum alignment for kmalloc on arm64 architectures. When KASAN_HW_TAGS is enabled, this change causes an aliasing issue between kmalloc caches of different sizes, leading to duplicate kmem_cache creation attempts. This results in warnings during system boot, indicating that a cache with the same name already exists. The warnings can clutter system logs and may indicate deeper issues with memory management, potentially affecting system performance and stability.
How To Fix
Minimum fixed version
6.11.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can monitor system logs for warnings and consider disabling KASAN_HW_TAGS if it is not essential for their use case.
Conclusion
The identified vulnerability in the Linux package's memory management subsystem poses a risk of duplicate kmem_cache creation, leading to warnings during system boot. Users are advised to update to the patched version to mitigate potential issues. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves duplicate kmem_cache creation in the Linux kernel's memory management subsystem, leading to warnings during system boot.
While the warnings do not directly crash the system, they can indicate underlying issues with memory management that may affect overall system stability and performance.
If you are using Debian 13 or 14 with the Linux package version prior to 6.11.9-1, your system may be affected. You can check for vulnerabilities using Vulert.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software. It uses a manifest file like package-lock.json to provide real-time alerts. You can check if your application is affected by this vulnerability using the Vulert playground.
If an immediate update is not possible, monitor system logs for warnings and consider disabling KASAN_HW_TAGS if it is not critical for your operations.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
