CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media
block: initialize integrity buffer to zero before writing it to media
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Add the __GFP_ZERO flag to allocations for writes so the integrity buffer is initialized to zero before being written to media.
Linux kernel bio_integrity_prep allocation flags for integrity buffers = __GFP_ZERO
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43854?
The severity of CVE-2024-43854 is high due to the potential for uninitialized kernel memory being written to media.
How do I fix CVE-2024-43854?
To fix CVE-2024-43854, ensure that your Linux kernel is updated to version 5.10.226-1 or higher, 6.1.123-1 or higher, or another appropriate remedied version.
Which versions of Linux are affected by CVE-2024-43854?
CVE-2024-43854 affects Linux kernel versions prior to 5.10.226-1, 6.1.123-1, and several other versions specified in the remedy.
What types of systems are vulnerable to CVE-2024-43854?
Systems running vulnerable versions of the Linux kernel as specified in the remedy section are susceptible to CVE-2024-43854.
Is there a permanent solution for CVE-2024-43854?
The permanent solution for CVE-2024-43854 is to upgrade your Linux kernel to a version that includes the patch for this vulnerability.