Critical Vulnerability in Linux Package: Self Peer Rx TID Cleanup Issue
Summary
DEBIAN-CVE-2024-56543: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer is done where Rx TID is updated for all the TIDs. Affects linux versions < 6.12.3-1. Fixed in 6.12.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and software interactions. It is widely used in various environments, from servers to personal computers. This package is crucial for system stability and performance, but it is also susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ath12k wireless driver related to the cleanup process of self peers. During the peer creation process, the driver sets up the data path (dp) for the peer, updating the Rx TID for all TIDs. However, the self peer does not undergo this setup, leading to a situation where, upon core halting, the cleanup process accesses an uninitialized memory area, resulting in a stack trace warning. This can potentially lead to system instability and crashes, affecting overall performance and reliability.
How To Fix
Minimum fixed version
6.12.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux package poses a significant risk to system stability and performance. It is crucial for users to update to the patched version to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper cleanup of self peers in the ath12k wireless driver, which can lead to system crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By uploading your manifest file, you can check for vulnerabilities without needing to install any software.
If exploited, this vulnerability can lead to system instability, crashes, and degraded performance.
Yes, a patch has been released in version 6.12.3-1 of the Linux package.
You can utilize Vulert's playground to monitor your applications for vulnerabilities in real-time without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
