Critical Vulnerability in Linux Kernel: ATTR_CTIME Handling Issue
Summary
DEBIAN-CVE-2024-57895: In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTR_CTIME flags when setting mtime David reported that the new warning from setattr_copy_mgtime is coming like the following. Affects linux versions < 6.12.9-1. Fixed in 6.12.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is responsible for managing system resources, facilitating communication between hardware and applications, and ensuring system stability. This vulnerability affects versions of the Linux kernel in Debian 13 and 14, specifically related to the ksmbd module, which handles SMB (Server Message Block) protocol operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ksmbd module where the system fails to set the ATTR_CTIME flags when modifying the mtime (modification time). This oversight can lead to warnings during operation, indicating potential inconsistencies in file attribute management. The warning is triggered by the function setattr_copy, which is responsible for updating file attributes. If left unaddressed, this vulnerability could lead to unexpected behavior in file handling and could impact systems relying on accurate file timestamps.
How To Fix
Minimum fixed version
6.12.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that your system is updated regularly can help mitigate potential risks associated with unpatched vulnerabilities.
Conclusion
The vulnerability in the Linux kernel's ksmbd module highlights the importance of maintaining up-to-date software to ensure system integrity and reliability. Users should promptly apply the available patch to mitigate risks associated with this issue.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves the ksmbd module in the Linux kernel failing to set the ATTR_CTIME flags when modifying file timestamps, leading to warnings and potential inconsistencies.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to the patch version 6.12.9-1.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring installation.
If exploited, this vulnerability could lead to incorrect file attribute management, which may affect applications relying on accurate file timestamps and could result in unexpected behavior.
Yes, a patch is available in the form of the Linux kernel version 6.12.9-1 or later. Users are encouraged to update their systems to this version.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
