Kernel Vulnerability in Linux Package: Uninitialized Memory Leak in SETREGSET for NT_ARM_FPMR
Summary
DEBIAN-CVE-2024-57878: In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR Currently fpmr_set() doesn't initialize the temporary 'fpmr' variable, and a SETREGSET call with a... Affects linux versions < 6.12.5-1. Fixed in 6.12.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically in the handling of the NT_ARM_FPMR register set, which is crucial for ARM architecture. The vulnerability arises from improper initialization of a temporary variable, leading to potential memory leaks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of the NT_ARM_FPMR register set. The function fpmr_set() fails to initialize a temporary variable, which can result in uninitialized memory being written back to the target thread's FPMR. This can leak up to 64 bits of kernel stack memory when a SETREGSET call with a length of zero is made. The issue does not allow for arbitrary writes, but it poses a risk of leaking sensitive information from the kernel stack.
How To Fix
Minimum fixed version
6.12.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The vulnerability in the Linux kernel regarding the NT_ARM_FPMR register set poses a risk of leaking sensitive information from the kernel stack. It is essential to update to the patched version 6.12.5-1 to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to the leakage of sensitive information from the kernel stack, potentially exposing up to 64 bits of memory.
You can check if your system is affected by using tools like Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your application.
Yes, a patch is available in version 6.12.5-1 of the Linux package. It is recommended to update to this version or later.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and plan to apply the patch as soon as possible.
Vulert is a tool that helps monitor and alert for open-source vulnerabilities in your software using just a manifest file like package-lock.json. It provides real-time insights without requiring code access.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
