CVE-2024-53109

CVE-2024-53109

High · published December 2, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nommu: pass NULL argument to vma_iter_prealloc()

When deleting a vma entry from a maple tree, it has to pass NULL to

vma_iter_prealloc() in order to calculate internal state of the tree, but

it passed a wrong argument. As a result, nommu kernels crashed upon

accessing a vma iterator, such as acct_collect() reading the size of vma

entries after do_munmap().

This commit fixes this issue by passing a right argument to the

preallocation call.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Published
2024-12-02T19:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.636.6.63
linux/linux_kernel≥ 6.7, < 6.11.106.11.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 02 DEC 13:44Z
    nommu: pass NULL argument to vma_iter_prealloc()
    cvelistv5