CVE-2024-53109

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53109
In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels crashed upon accessing a vma iterator, such as acct_collect() reading the size of vma entries after do_munmap(). This commit fixes this issue by passing a right argument to the preallocation call.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/247d720b2c5d22f7281437fd6054a138256986ba Patch
https://git.kernel.org/stable/c/8bbf0ab631cdf1dade6745f137cff98751e6ced7 Patch
https://git.kernel.org/stable/c/aceaf33b7666b72dfb86e0aa977be81e3bcbc727 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*
History

11 Dec 2024, 20:21

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nommu: pasar argumento NULL a vma_iter_prealloc(). Al eliminar una entrada vma de un árbol maple, tiene que pasar NULL a vma_iter_prealloc() para calcular el estado interno del árbol, pero pasó un argumento incorrecto. Como resultado, los kernels nommu fallaban al acceder a un iterador vma, como acct_collect() que lee el tamaño de las entradas vma después de do_munmap(). Esta confirmación corrige este problema al pasar un argumento correcto a la llamada de preasignación.
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/247d720b2c5d22f7281437fd6054a138256986ba - () https://git.kernel.org/stable/c/247d720b2c5d22f7281437fd6054a138256986ba - Patch
References () https://git.kernel.org/stable/c/8bbf0ab631cdf1dade6745f137cff98751e6ced7 - () https://git.kernel.org/stable/c/8bbf0ab631cdf1dade6745f137cff98751e6ced7 - Patch
References () https://git.kernel.org/stable/c/aceaf33b7666b72dfb86e0aa977be81e3bcbc727 - () https://git.kernel.org/stable/c/aceaf33b7666b72dfb86e0aa977be81e3bcbc727 - Patch

02 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-02 14:15

Updated : 2024-12-11 20:21

NVD link : CVE-2024-53109

Mitre link : CVE-2024-53109

CVE.ORG link : CVE-2024-53109

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo