Critical Use-After-Free Vulnerability in Linux Kernel - PCI Domain ID Release Issue
Summary
DEBIAN-CVE-2024-56561: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() pci_epc_destroy() invokes pci_bus_release_domain_nr() to release the PCI domain ID, but th... Affects linux versions < 6.12.5-1. Fixed in 6.12.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and extensive hardware support. However, like any complex software, it is susceptible to vulnerabilities. This specific vulnerability affects the PCI subsystem, which is responsible for managing PCI devices and their interactions with the system. The vulnerability arises from improper handling of device memory, leading to potential security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the PCI endpoint controller (EPC) management. The function pci_epc_destroy() incorrectly passes a freed device pointer to pci_bus_release_domain_nr(), resulting in a use-after-free condition. This can lead to undefined behavior, including potential system crashes or exploitation by malicious actors. The vulnerability is critical as it compromises the integrity of the PCI subsystem, which is vital for hardware communication.
How To Fix
Minimum fixed version
6.12.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel as mentioned above.
Conclusion
The identified vulnerability in the Linux kernel's PCI subsystem poses significant risks, including potential system crashes and exploitation. It is crucial for users to update their systems to the patched version 6.12.5-1 to mitigate these risks. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a use-after-free issue in the PCI subsystem of the Linux kernel, which can lead to system instability and potential exploitation.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
Failing to fix this vulnerability may expose your system to crashes and potential exploitation by attackers, compromising system security and stability.
The vulnerability affects specific versions of the Linux kernel prior to the fixed version 6.12.5-1. It is crucial to update to this version or later.
Detailed information can be found in the official Debian CVE database and through security advisories related to the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
