CVE-2024-26893: linux-libc-dev - Fix double free in SMC transport cleanup path
Summary
CVE-2024-26893: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in SMC transport cleanup path When the generic SCMI code tears down a channel, it calls the chan_free callback funct... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs that use the Linux kernel's system calls and interfaces. It is an essential component for building and running applications on Linux systems. The vulnerability in this package affects the arm_scmi firmware, which is responsible for communication between the ARM System Control and Management Interface (SCMI) and the kernel. The vulnerability allows for a double free in the SMC transport cleanup path, leading to a NULL pointer dereference and potentially causing a kernel crash.
Vulnerability Detail
The vulnerability occurs when the generic SCMI code tears down a channel and calls the chan_free callback function. In the case of the SMC transport implementation, multiple protocols can share the same transport_info member. This can result in the chan_free function attempting to clean up the same member multiple times, leading to a NULL pointer dereference and a kernel crash. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition on a vulnerable system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update the linux-libc-dev package as soon as possible.
Conclusion
The linux-libc-dev package is vulnerable to a double free vulnerability in the SMC transport cleanup path. This vulnerability can be exploited to cause a kernel crash and a denial-of-service (DoS) condition. It is crucial to update the package to version 6.1.90-1 or later to mitigate the risk. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a development package that provides header files and libraries for compiling C programs that use the Linux kernel's system calls and interfaces.
arm_scmi firmware is responsible for communication between the ARM System Control and Management Interface (SCMI) and the kernel.
This vulnerability can lead to a NULL pointer dereference and potentially cause a kernel crash, resulting in a denial-of-service (DoS) condition on a vulnerable system.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later by using the package manager's update command or manually installing the updated package from the official Debian repository.
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update the linux-libc-dev package as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
