CVE-2024-35826: Vulnerability in linux-libc-dev - Fix page refcounts for unaligned buffers in __bio_release_pages()
Summary
CVE-2024-35826: In the Linux kernel, the following vulnerability has been resolved: block: Fix page refcounts for unaligned buffers in __bio_release_pages() Fix an incorrect number of pages being released for buffers that do not start a... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Debian operating system that provides the C library headers for the Linux kernel. These headers are necessary for compiling and building applications that interact with the kernel. The linux-libc-dev package is an essential component for developers working on Debian-based systems. However, a vulnerability has been discovered in the package that affects its functionality.
Vulnerability Detail
The vulnerability in linux-libc-dev, identified as CVE-2024-35826, is related to an incorrect number of pages being released for buffers that do not start at the beginning of a page. This issue can lead to memory corruption and potential security risks. Attackers may exploit this vulnerability to gain unauthorized access or execute arbitrary code on affected systems. The vulnerability has a CVSS score of 5.5, indicating a medium severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the linux-libc-dev package.
Conclusion
The vulnerability in linux-libc-dev can be mitigated by updating the package to the latest version. It is crucial to promptly apply the fix to ensure the correct release of pages for unaligned buffers and prevent potential security risks. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Debian operating system that provides the C library headers for the Linux kernel. These headers are necessary for compiling and building applications that interact with the kernel.
The vulnerability in linux-libc-dev can lead to memory corruption and potential security risks. Attackers may exploit this vulnerability to gain unauthorized access or execute arbitrary code on affected systems.
The CVSS score of this vulnerability is 5.5, indicating a medium severity level.
To fix the vulnerability, it is recommended to update the linux-libc-dev package to version 6.1.90-1 or later. This update includes a patch that addresses the issue and ensures the correct release of pages for unaligned buffers.
No specific workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the linux-libc-dev package.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
