CVE-2024-26669: linux-libc-dev - Fix chain template offload vulnerability
Summary
CVE-2024-26669: In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow off... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the Linux system. It is an essential component for compiling and running programs on Linux. The linux-libc-dev package contains the necessary header files and static libraries for compiling C programs that use system calls and other kernel interfaces. This package is vulnerable to a chain template offload vulnerability.
Vulnerability Detail
The vulnerability in linux-libc-dev arises when a qdisc (queueing discipline) is deleted from a network device. The stack fails to remove the flow offload callback from the associated filter block, resulting in a memory leak. This can be exploited by an attacker to cause a denial of service (DoS) or potentially execute arbitrary code. The vulnerability has a CVSS score of 7.1, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment. It is crucial to apply the provided fix by updating the linux-libc-dev package to the latest version.
Conclusion
The linux-libc-dev package is vulnerable to a chain template offload issue, which can result in a memory leak and potential security risks. It is highly recommended to update the package to version 6.1.90-1 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the Linux system. It is essential for compiling and running programs on Linux.
A chain template offload vulnerability refers to a flaw in the handling of qdisc deletion in the Linux kernel. It can lead to a memory leak and potential denial of service or code execution.
This vulnerability can be exploited by an attacker to cause a denial of service or potentially execute arbitrary code on a system running the vulnerable linux-libc-dev package.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later. This update includes a fix for the chain template offload issue.
No, there is no known workaround for this vulnerability. It is crucial to apply the provided fix by updating the linux-libc-dev package.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
