CVE-2024-53109

MEDIUM EPSS 14.0%
Published Dec 2, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Dec 2, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels crashed upon accessing a vma iterator, such as acct_collect() reading the size of vma entries after do_munmap(). This commit fixes this issue by passing a right argument to the preallocation call.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥6.6  –  <6.6.63
linuxlinux_kernel*≥6.7  –  <6.11.10
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/247d720b2c5d22f7281437fd6054a138256986ba
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bbf0ab631cdf1dade6745f137cff98751e6ced7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aceaf33b7666b72dfb86e0aa977be81e3bcbc727
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/247d720b2c5d22f7281437fd6054a138256986ba
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bbf0ab631cdf1dade6745f137cff98751e6ced7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aceaf33b7666b72dfb86e0aa977be81e3bcbc727
    Patch