CVE-2024-26974 – This CVE describes a use-after-free vulnerabili... (How to Fix)

Q: What is the severity of CVE-2024-26974?

CVE-2024-26974 has a CVSS score of 7.0 (HIGH). This CVE describes a use-after-free vulnerability in the Linux kernel's Intel QAT crypto driver during PCI AER error recovery. A race condition occurs when device restart takes over 10 seconds, causing premature freeing of memory structures still needed for completion notifications. This affects systems using Intel QuickAssist Technology hardware acceleration with vulnerable kernel versions.

📋 TL;DR

This CVE describes a use-after-free vulnerability in the Linux kernel's Intel QAT crypto driver during PCI AER error recovery. A race condition occurs when device restart takes over 10 seconds, causing premature freeing of memory structures still needed for completion notifications. This affects systems using Intel QuickAssist Technology hardware acceleration with vulnerable kernel versions.

💻 Affected Systems

Products:

Linux kernel with Intel QAT driver (intel_qat)

Versions: Linux kernel versions containing the vulnerable code; specific version range depends on distribution backports.

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects systems with Intel QAT hardware enabled and using the vulnerable driver. Virtualized environments may be affected if passing through QAT devices.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic, system crash, or potential privilege escalation leading to full system compromise if an attacker can trigger the race condition repeatedly.

🟠

Likely Case

System instability, kernel crashes, or denial of service affecting QAT-dependent applications like crypto operations or compression workloads.

🟢

If Mitigated

Minimal impact if systems aren't using QAT hardware or have the patch applied; occasional crashes if the race condition triggers naturally.

🌐 Internet-Facing: LOW - Requires local access or ability to trigger PCI AER events, which typically requires physical or privileged access.

🏢 Internal Only: MEDIUM - Internal systems with QAT hardware could experience instability affecting business-critical crypto operations.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: HIGH - Requires triggering specific PCI AER conditions and timing the race window precisely.

Exploitation requires local access and ability to trigger PCI error recovery events. No public exploits known.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patched in kernel commits: 0c2cf5142bfb634c0ef0a1a69cdf37950747d0be, 226fc408c5fcd23cc4186f05ea3a69a7a9aef2f7, 4ae5a97781ce7d6ecc9c7055396535815b64ca4f, 7d42e097607c4d246d99225bf2b195b6167a210c, 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc

Vendor Advisory: https://git.kernel.org/stable/c/0c2cf5142bfb634c0ef0a1a69cdf37950747d0be

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution. 2. Rebuild kernel if compiling from source with included patches. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable Intel QAT driver

linux

Prevent loading of vulnerable intel_qat kernel module

echo 'blacklist intel_qat' > /etc/modprobe.d/blacklist-qat.conf
rmmod intel_qat
update-initramfs -u

Disable PCI AER

linux

Turn off PCI Advanced Error Reporting to prevent trigger condition

echo 0 > /sys/bus/pci/devices/*/aer_dev_correctable
echo 0 > /sys/bus/pci/devices/*/aer_dev_fatal
echo 0 > /sys/bus/pci/devices/*/aer_dev_nonfatal

🧯 If You Can't Patch

Monitor systems for kernel crashes or KFENCE warnings related to intel_qat
Implement strict access controls to prevent unauthorized local access to affected systems

🔍 How to Verify

Check if Vulnerable:

Check if intel_qat module is loaded: lsmod | grep intel_qat. If loaded and kernel version is unpatched, system is vulnerable.

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes the fix commits or check with distribution's security advisory. Confirm intel_qat module loads without issues.

📡 Detection & Monitoring

Log Indicators:

KFENCE use-after-free warnings in kernel logs
Kernel oops or panic messages mentioning adf_device_reset_worker
System crashes during PCI error recovery events

Network Indicators:

None - this is a local kernel vulnerability

SIEM Query:

source="kernel" AND ("KFENCE" OR "use-after-free" OR "adf_device_reset_worker" OR "intel_qat")

📊 Metadata

CVE ID: CVE-2024-26974

CVSS v3 Score: 7.0 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-367

Published: May 1, 2024

Last Updated: December 23, 2024

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-26974, you might also want to check these: