Use-After-Free Vulnerability in Linux Kernel - Impacting Debian Packages
Summary
DEBIAN-CVE-2024-57801: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. Affects linux versions < 6.12.9-1. Fixed in 6.12.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is a critical piece of software that enables the functionality of various devices and systems. The vulnerability in question affects the Linux kernel versions in Debian 13 and 14, specifically related to the mlx5e network driver, which handles network device operations. This vulnerability can lead to severe security risks if not addressed promptly.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the mlx5e network driver. This issue arises during the driver unload process, where the unregister_netdev function is called after unloading the vport representative (rep). As a result, the mlx5e_rep_priv structure is already freed, leading to potential access of freed memory when attempting to retrieve rpriv->netdev or traverse rpriv->tc_ht. This can result in undefined behavior, crashes, or exploitation by malicious actors.
How To Fix
Minimum fixed version
6.12.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch by updating the kernel package.
Conclusion
The identified use-after-free vulnerability in the Linux kernel poses serious risks to systems running Debian 13 and 14. It is crucial for users to update their kernel packages to the fixed version 6.12.9-1 to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory location after it has been freed, potentially leading to crashes or exploitation.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to install any software.
The risks include system crashes, unauthorized access to sensitive data, and potential exploitation by attackers to execute arbitrary code.
It is not safe to continue using the affected versions, as they expose your system to significant security risks. It is recommended to update to the patched version as soon as possible.
Detailed information can be found in the Debian CVE database and through security advisories related to the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
