CVE-2024-35931: linux-libc-dev - kernel: drm/amdgpu: Skip do PCI error slot reset during RAS recovery
Summary
CVE-2024-35931: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot reset maybe triggered after inject ue to UMC multi times, this caus... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package that provides the Linux kernel headers for development purposes. It allows developers to compile and build applications that interact with the Linux kernel. This package is an essential component for building and running software on Linux systems. However, a vulnerability has been identified in the package that affects its functionality and security.
Vulnerability Detail
The vulnerability (CVE-2024-35931) in linux-libc-dev is related to the drm/amdgpu module in the Linux kernel. It involves the mishandling of PCI error slot reset during RAS (Reliability, Availability, and Serviceability) recovery. When a GPU reset is triggered after an injection, the system may hang due to the PCI error slot reset being performed multiple times. This can lead to a general protection fault and potentially impact system stability and performance.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the recommended fix by updating the linux-libc-dev package to the latest version.
Conclusion
The linux-libc-dev package is vulnerable to a flaw in the drm/amdgpu module of the Linux kernel. This vulnerability can lead to system hangs and general protection faults. It is crucial to update the linux-libc-dev package to the latest version to mitigate the risk. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package that provides the Linux kernel headers for development purposes. It allows developers to compile and build applications that interact with the Linux kernel.
RAS (Reliability, Availability, and Serviceability) recovery is a mechanism in the Linux kernel that handles fatal errors and attempts to recover the system to a stable state. It involves resetting components and restoring their functionality.
You can check the version of linux-libc-dev installed on your system by running the command 'dpkg -s linux-libc-dev' on Debian-based systems. This will display detailed information about the package, including its version.
No, this vulnerability affects the linux-libc-dev package in general, regardless of the Linux distribution. However, the fix for this vulnerability may vary depending on the package manager and update process of each distribution.
The potential consequences of this vulnerability include system hangs, GPU reset failures, and general protection faults. These issues can impact system stability, performance, and the ability to run applications that rely on the linux-libc-dev package.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
