Memory Leak Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2024-57793: In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause set_memory_decrypted() to... Affects linux versions < 6.12.8-1. Fixed in 6.12.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to memory management in CoCo virtual machines (VMs).
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where decrypted memory can be leaked during unrecoverable errors in CoCo VMs. When the function set_memory_decrypted() fails, it can lead to the sharing of decrypted memory, posing significant security risks. Callers must handle these errors properly to prevent decrypted memory from being returned to the page allocator, which could result in functional or security issues.
How To Fix
Minimum fixed version
6.12.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to Debian users, particularly in CoCo VMs. It is crucial to update to the patched version to mitigate potential security threats. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a memory leak in the Linux kernel that can expose decrypted memory in CoCo VMs.
The vulnerability affects Linux kernel versions in Debian 13 and 14 prior to the fixed version 6.12.8-1.
You can use Vulert, which monitors open-source vulnerabilities in real-time. By using the manifest file like package-lock.json, you can check if your application is affected without requiring installation.
If exploited, this vulnerability could lead to unauthorized access to decrypted memory, resulting in security breaches and potential data leaks.
Yes, Vulert provides a playground where you can check for vulnerabilities in your application without signing up. Visit Vulert Scanner for more information.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
