PT-2024-31356 · Linux+6 · Linux Kernel+6

Haiyang Zhang · Published 2024-08-12 · Updated 2025-09-29 · CVE-2024-45001

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The MANA driver's RX buffer alloc size is passed into napi build skb() to create SKB. The size needs to be aligned properly for better performance and atomic operations. Otherwise, on ARM64 CPU, for certain MTU settings like 4000, atomic operations may panic on the skb shinfo(skb)->dataref due to alignment fault. To fix this bug, add proper alignment to the alloc size calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13979

BDU:2025-01808

CVE-2024-45001

DLA-4102-1

MGASA-2024-0309

MGASA-2024-0310

OESA-2025-1097

OPENSUSE-SU-2024_3551-1

OPENSUSE-SU-2024_3561-1

OPENSUSE-SU-2024_3564-1

OPENSUSE-SU-2024_3587-1

OPENSUSE-SU-2024_3592-1

SUSE-SU-2024:3551-1

SUSE-SU-2024:3553-1

SUSE-SU-2024:3561-1

SUSE-SU-2024:3564-1

SUSE-SU-2024:3569-1

SUSE-SU-2024:3587-1

SUSE-SU-2024:3592-1

SUSE-SU-2025:20073-1

SUSE-SU-2025:20077-1

USN-7074-1

USN-7076-1

USN-7076-2

USN-7090-1

USN-7095-1

USN-7154-1

USN-7154-2

USN-7156-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1289

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45001.json · Exploit
• https://ubuntu.com/security/CVE-2024-41079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56769 · Security Note
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53122 · Security Note
• https://ubuntu.com/security/CVE-2024-46803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory