CVE-2024-53107CWE-190

CVE-2024-53107

High · published December 2, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()

The "arg->vec_len" variable is a u64 that comes from the user at the start

of the function. The "arg->vec_len * sizeof(struct page_region))"

multiplication can lead to integer wrapping. Use size_mul() to avoid

that.

Also the size_add/mul() functions work on unsigned long so for 32bit

systems we need to ensure that "arg->vec_len" fits in an unsigned long.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-12-02T19:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.11.106.11.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 02 DEC 13:44Z
    fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
    cvelistv5