PT-2024-35539 · Linux+2 · Linux Kernel+2

Published 2024-10-25 · Updated 2025-02-28 · CVE-2024-53075

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a bad reference count on CPU nodes in the Linux kernel when populating cache leaves. This occurs because when ACPI is enabled, the code takes a specific branch that returns early without calling of node put for the acquired node. To fix this, the initialization of the CPU device node has been moved past the ACPI block to ensure an of node put call for the acquired node, preventing a bad reference count. Additionally, error checking has been added for acquiring the device node to handle cases where it may not be available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-825

Related Identifiers

BDU:2025-15072

CVE-2024-53075

USN-7276-1

USN-7277-1

USN-7310-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 787

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53075.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50277 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50086 · Vendor Advisory