PT-2024-10204 · Linux+6 · Linux Kernel+6
Jann Horn
·
Published
2024-11-05
·
Updated
2025-10-08
·
CVE-2024-53148
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel and involves a problem with partial mappings in the error case for the comedi subsystem. If some
remap pfn range() calls succeed before one fails, buffer pages remain mapped into the userspace page tables when the buffer reference is dropped with comedi buf map put(bm). These mappings are only cleaned up later in the mmap error path. The fix involves explicitly flushing all mappings in the VMA on the error path.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu