CVE-2024-26706: linux-libc-dev - Fix random data corruption from exception handler
Summary
CVE-2024-26706: In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler implementation, which assists when accessing user space memory,... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
linux-libc-dev is a package in the Debian operating system that provides the C library development files for the Linux kernel. It is an essential component for compiling and linking programs on Debian-based systems. The package contains header files and static libraries necessary for developing applications that interact with the Linux kernel. The linux-libc-dev package is widely used by developers and system administrators to build and maintain software on Debian-based systems.
Vulnerability Detail
The linux-libc-dev package is affected by a vulnerability that can lead to random data corruption. The vulnerability arises from the current exception handler implementation used to assist in accessing user space memory. If the compiler chooses a different register than the specified register %r29 for the error code, the fault handler will store -EFAULT into %r29, potentially corrupting the data stored in that register. This issue can occur in functions such as emulate_ldd(). To address this vulnerability, the package has been updated to extend the __ex_table and instruct the compiler to insert an assembler instruction that references the correct register for the error code. The fault handler can then store -EFAULT into the appropriate register, preventing data corruption.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the provided fix by updating the linux-libc-dev package to the latest version.
Conclusion
The linux-libc-dev package is affected by a vulnerability that can result in random data corruption. Users are advised to update to the latest version of the package to mitigate this issue. Regularly updating packages is crucial for maintaining the security and stability of Debian-based systems. For further assistance and support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Debian operating system that provides the C library development files for the Linux kernel.
This vulnerability can lead to random data corruption, potentially affecting the stability and integrity of applications that rely on the linux-libc-dev package.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later using the package manager.
There is no known workaround for this vulnerability. It is recommended to apply the provided fix by updating the linux-libc-dev package.
More information about this vulnerability can be found in the references section of the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
