CVE-2024-53145

MEDIUM EPSS 11.6%
Published Dec 24, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Dec 24, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
11.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥4.1  –  <5.4.287
linuxlinux_kernel*≥5.5  –  <5.10.231
linuxlinux_kernel*≥5.11  –  <5.15.174
linuxlinux_kernel*≥5.16  –  <6.1.120
linuxlinux_kernel*≥6.2  –  <6.6.64
linuxlinux_kernel*≥6.7  –  <6.11.11
linuxlinux_kernel*≥6.12  –  <6.12.2

References 10

  • git.kernel.org https://git.kernel.org/stable/c/1575df968650d11771359e5ac78278c5b0cc19f3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1bd118c5f887802cef2d9ba0d1917258667f1cae
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c710f45811e7e2bfcf703980c306f19c7e1ecfe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a875c023155ea92b75d6323977003e64d92ae7fc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a98b7761f697e590ed5d610d87fa12be66f23419
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a9c95f787b88b29165563fd97761032db77116e7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d1a211e5210d31da8f49fc0021bf7129b726468c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e6102b72edc4eb8c0858df00ba74b5ce579c8fa2
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1575df968650d11771359e5ac78278c5b0cc19f3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1bd118c5f887802cef2d9ba0d1917258667f1cae
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5c710f45811e7e2bfcf703980c306f19c7e1ecfe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a875c023155ea92b75d6323977003e64d92ae7fc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a98b7761f697e590ed5d610d87fa12be66f23419
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a9c95f787b88b29165563fd97761032db77116e7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d1a211e5210d31da8f49fc0021bf7129b726468c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e6102b72edc4eb8c0858df00ba74b5ce579c8fa2
    Patch