CVE-2024-36909: linux-libc-dev - Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
Summary
CVE-2024-36909: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypte... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package for the Linux kernel. It provides the necessary header files and libraries for compiling programs that interact with the kernel. This package is commonly used by developers to build kernel modules and other low-level software. The vulnerability in this package affects the VMBus ring buffer code, which is responsible for communication between the host and guest operating systems in Hyper-V virtual machines.
Vulnerability Detail
The vulnerability in the linux-libc-dev package allows an untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail, resulting in shared memory that is not properly encrypted. This can lead to functional or security issues if decrypted (shared) memory is returned to the page allocator. Specifically, the VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. To determine whether to free the memory, the decrypted field in the struct vmbus_gpadl for the ring buffers is checked.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The linux-libc-dev package is vulnerable to a flaw in the VMBus ring buffer code, which could result in the freeing of decrypted/shared pages when set_memory_decrypted() fails. To mitigate this vulnerability, it is recommended to update the package to a version that includes the necessary patch. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package is a development package for the Linux kernel. It provides header files and libraries for compiling programs that interact with the kernel.
The VMBus ring buffer code is responsible for communication between the host and guest operating systems in Hyper-V virtual machines.
set_memory_encrypted() and set_memory_decrypted() are functions in the Linux kernel that handle memory encryption and decryption operations.
The vulnerability could lead to functional or security issues if decrypted (shared) memory is returned to the page allocator.
Users can update the linux-libc-dev package by obtaining the updated version from the official Debian repositories or through their package manager.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
