Critical IRQ Restore Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-57891: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix invalid irq restore in scx_ops_bypass() While adding outer irqsave/restore locking, 0e7ffff1b811 ("scx: Fix raciness in scx_ops_bypass()"... Affects linux versions < 6.12.9-1. Fixed in 6.12.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, from servers to embedded systems. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically in the scheduling extensions (sched_ext) functionality, which is designed to enhance the performance of scheduling tasks in multi-core environments.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the scheduling extensions (sched_ext) related to improper handling of IRQ (interrupt request) restoration in the function scx_ops_bypass(). The issue arose from a failure to convert an inner rq_unlock_irqrestore() to rq_unlock(), which could lead to premature re-enabling of IRQs. This flaw can result in system instability and unexpected behavior, as indicated by warnings generated during operation. The vulnerability is tracked as DEBIAN-CVE-2024-57891.
How To Fix
Minimum fixed version
6.12.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The vulnerability identified in the Linux kernel's scheduling extensions poses a significant risk to system stability and performance. Users are strongly encouraged to update to the patched version to mitigate potential issues. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper IRQ restoration in the Linux kernel's scheduling extensions, which can lead to system instability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected without any signup.
If exploited, this vulnerability could lead to system crashes, unexpected behavior, and performance degradation due to improper handling of interrupts.
Yes, a patch is available in the form of the Linux kernel version 6.12.9-1, which resolves the issue.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and plan to update as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
