Critical Memory Barrier Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-58084: In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() Commit 2e4955167ec5 ("firmware: qcom: scm: Fix scm and waitq completion varia... Affects linux versions < 6.12.15-1. Fixed in 6.12.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes, data loss, or unauthorized access. This specific vulnerability affects the Linux kernel versions in Debian 13 and 14, highlighting the importance of timely updates to maintain system integrity.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the Qualcomm SCM (Secure Control Module) firmware. The issue arises from a missing read barrier in the function qcom_scm_get_tzmem_pool(). A previous commit introduced a write barrier for the global '__scm' variable, but without a corresponding read barrier, concurrent access can lead to fetching a stale value, potentially resulting in a NULL dereference. This could cause system instability or crashes, making it critical to address this vulnerability promptly.
How To Fix
Minimum fixed version
6.12.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The identified vulnerability in the Linux kernel related to the Qualcomm SCM firmware poses significant risks to system stability and security. Users are urged to update their kernel to the patched version 6.12.15-1 to mitigate these risks. Regular updates and monitoring for vulnerabilities are essential practices for maintaining a secure computing environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system instability or crashes due to potential NULL dereference when accessing the '__scm' variable.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to the patched version 6.12.15-1.
Yes, if exploited, this vulnerability could lead to system crashes, which may result in data loss.
It is recommended to regularly check for updates and apply them promptly to ensure system security and stability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
