CVE-2024-35949: Vulnerability in linux-libc-dev package - Metadata Block Corruption
Summary
CVE-2024-35949: In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfs_check_leaf() if we had the check integrity code enabled, whic... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a component of the Linux kernel that provides the necessary C library headers for compiling programs. It is an essential package for developers and system administrators working on Linux-based systems. This package allows users to access various system calls and functions provided by the kernel. Unfortunately, a vulnerability has been discovered in the package that can lead to metadata block corruption.
Vulnerability Detail
The vulnerability (CVE-2024-35949) in the linux-libc-dev package arises from a flaw in the btrfs filesystem implementation. Previously, the btrfs_check_leaf() function was only called when the check integrity code was enabled and the WRITTEN flag was set on the header flags. This resulted in a gap in the checking process, allowing corruption on disk where the WRITTEN flag was not set on the leaf. As a consequence, the extended leaf checks, which are crucial for validating item pointers and preventing memory access outside the extent buffer, were not performed. An attacker could exploit this vulnerability by manipulating the WRITTEN bit, leading to out-of-bound access and potential memory corruption. This vulnerability has a CVSS score of 5.5, indicating a medium severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is essential to apply the recommended fix by updating the linux-libc-dev package to the latest version.
Conclusion
The linux-libc-dev package is vulnerable to a flaw in the btrfs filesystem implementation, which can result in metadata block corruption. To mitigate this vulnerability, it is crucial to update the package to version 6.1.90-1 or later. Users should follow the provided steps to apply the fix and ensure the WRITTEN flag is appropriately set on metadata blocks. For further support or assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides C library headers for compiling programs and accessing system calls and functions provided by the Linux kernel.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) to the playground, and it will analyze and alert you in real-time if any open-source vulnerabilities, including this one, are detected.
Exploiting this vulnerability could lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition on the affected system.
No known exploits for this vulnerability have been reported at the time of this advisory. However, it is crucial to apply the recommended fix to mitigate any potential risks.
You can find more information about this vulnerability in the official CVE entry (CVE-2024-35949) and the Debian Security Tracker (https://salsa.debian.org/security-tracker-team/security-tracker).
Related vulnerabilities
Recent vulnerabilities recorded for linux.
