CVE-2024-53092: virtio_pci: Fix admin vq cleanup by using correct info pointer
First published: Thu Nov 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: virtio_pci: Fix admin vq cleanup by using correct info pointer vp_modern_avq_cleanup() and vp_del_vqs() clean up admin vq resources by virtio_pci_vq_info pointer. The info pointer of admin vq is stored in vp_dev->admin_vq.info instead of vp_dev->vqs[]. Using the info pointer from vp_dev->vqs[] for admin vq causes a kernel NULL pointer dereference bug. In vp_modern_avq_cleanup() and vp_del_vqs(), get the info pointer from vp_dev->admin_vq.info for admin vq to clean up the resources. Also make info ptr as argument of vp_del_vq() to be symmetric with vp_setup_vq(). vp_reset calls vp_modern_avq_cleanup, and causes the Call Trace: ================================================================== BUG: kernel NULL pointer dereference, address:0000000000000000 ... CPU: 49 UID: 0 PID: 4439 Comm: modprobe Not tainted 6.11.0-rc5 #1 RIP: 0010:vp_reset+0x57/0x90 [virtio_pci] Call Trace: <TASK> ... ? vp_reset+0x57/0x90 [virtio_pci] ? vp_reset+0x38/0x90 [virtio_pci] virtio_reset_device+0x1d/0x30 remove_vq_common+0x1c/0x1a0 [virtio_net] virtnet_remove+0xa1/0xc0 [virtio_net] virtio_dev_remove+0x46/0xa0 ... virtio_pci_driver_exit+0x14/0x810 [virtio_pci] ==================================================================
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=6.11<6.11.9 | |
| Linux Kernel | =6.12-rc1 | |
| Linux Kernel | =6.12-rc2 | |
| Linux Kernel | =6.12-rc3 | |
| Linux Kernel | =6.12-rc4 | |
| Linux Kernel | =6.12-rc5 | |
| Linux Kernel | =6.12-rc6 | |
| Linux Kernel | =6.12-rc7 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.135-1 6.12.22-1 6.12.25-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/018d3d4ad4be7fbc95d8a2367642a32d21df55c7
- https://git.kernel.org/stable/c/97ee04feb682c906a1fa973ebe586fe91567d165
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53092
- https://nvd.nist.gov/vuln/detail/CVE-2024-53092
- https://launchpad.net/bugs/cve/CVE-2024-53092
- https://security-tracker.debian.org/tracker/CVE-2024-53092
- https://ubuntu.com/security/CVE-2024-53092
- https://git.kernel.org/linus/97ee04feb682c906a1fa973ebe586fe91567d165
Frequently Asked Questions
What is the severity of CVE-2024-53092?
CVE-2024-53092 has a severity rating that requires attention due to its potential impact on the Linux kernel's admin virtual queue resources.
How do I fix CVE-2024-53092?
To fix CVE-2024-53092, update your Linux kernel to the latest version beyond 6.11.9 or to a stable release post 6.12-rc7.
Which Linux kernel versions are affected by CVE-2024-53092?
CVE-2024-53092 affects Linux kernel versions from 6.11 to 6.12-rc7.
What components are vulnerable in CVE-2024-53092?
CVE-2024-53092 specifically impacts the virtio_pci module related to the cleanup of admin virtual queue resources.
What issues does CVE-2024-53092 resolve in the Linux kernel?
CVE-2024-53092 addresses issues related to the improper cleanup of admin virtual queue information pointers in the Linux kernel.
- agent/weakness
- agent/title
- agent/type
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/usn-cve
- source/Ubuntu
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-cve
- agent/references
- agent/source
- agent/tags
- agent/description
- agent/softwarecombine
- agent/event
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.11
- version/linux kernel/6.12-rc1
- version/linux kernel/6.12-rc2
- version/linux kernel/6.12-rc3
- version/linux kernel/6.12-rc4
- version/linux kernel/6.12-rc5
- version/linux kernel/6.12-rc6
- version/linux kernel/6.12-rc7
- package-manager/debian