Slab Use-After-Free Vulnerability in Linux Kernel - Debian Packages
Summary
DEBIAN-CVE-2024-53068: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() The scmi_dev->name is released prematurely in scmi_device_destroy(), which causes sla... Affects linux versions < 6.11.9-1. Fixed in 6.11.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device drivers. The kernel is critical for system stability and security, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where the 'scmi_dev->name' is released prematurely in the '__scmi_device_destroy()' function. This premature release leads to a slab-use-after-free condition when accessing 'scmi_dev->name' in the 'scmi_bus_notifier()' function. The vulnerability can result in system instability and potential exploitation by malicious actors, as it allows for unauthorized access to freed memory, leading to unpredictable behavior or crashes.
How To Fix
Minimum fixed version
6.11.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The slab-use-after-free vulnerability in the Linux kernel poses significant risks to system stability and security. It is essential for users of Debian 13 and 14 to update their systems to the patched version '6.11.9-1' to protect against potential exploitation. Regular monitoring and updates are vital for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
A slab-use-after-free vulnerability occurs when a program continues to use memory that has already been freed, leading to potential data corruption or exploitation.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
If exploited, this vulnerability can lead to system crashes, unauthorized access to sensitive data, or remote code execution.
Yes, the vulnerability affects versions prior to '6.11.9-1' in Debian 13 and 14.
While there are no specific workarounds, it is crucial to prioritize updating your system to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
