CVE-2024-53145
um: Fix potential integer overflow during physmem setup
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.1
References 8
git.kernel.org
- stable/c/5c710f45811e7e2bfcf703980c306f19c7e1ecfe
- stable/c/e6102b72edc4eb8c0858df00ba74b5ce579c8fa2
- stable/c/1bd118c5f887802cef2d9ba0d1917258667f1cae
- stable/c/1575df968650d11771359e5ac78278c5b0cc19f3
- stable/c/a875c023155ea92b75d6323977003e64d92ae7fc
- stable/c/d1a211e5210d31da8f49fc0021bf7129b726468c
- stable/c/a9c95f787b88b29165563fd97761032db77116e7
- stable/c/a98b7761f697e590ed5d610d87fa12be66f23419