CVE-2024-27054: linux-libc-dev - Fix double module refcount decrement
Summary
CVE-2024-27054: In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the mo... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs that use the Linux kernel's system calls and data structures. It is an essential component for building and running applications on Linux systems. The vulnerability identified as CVE-2024-27054 affects the linux-libc-dev package.
Vulnerability Detail
The vulnerability in linux-libc-dev, identified as CVE-2024-27054, is related to the s390/dasd module. The issue arises when the module's refcount is incorrectly decremented twice, leading to an artificial decrease in the refcount on each error. This vulnerability can potentially cause instability and unexpected behavior in systems utilizing the s390/dasd module.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the linux-libc-dev package.
Conclusion
The vulnerability in linux-libc-dev, identified as CVE-2024-27054, has been addressed with the release of version 6.1.90-1. It is crucial to update the linux-libc-dev package to ensure the correct handling of the module's refcount and maintain system stability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a development package that provides header files and libraries for compiling C programs that use the Linux kernel's system calls and data structures.
The vulnerability can cause instability and unexpected behavior in systems utilizing the s390/dasd module.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later.
No workaround has been provided for this vulnerability. It is recommended to update the linux-libc-dev package.
You can find more information about this vulnerability in the provided references.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
