PT-2024-35592 · Linux+5 · Linux Kernel+5
Christophe Jaillet
·
Published
2024-11-06
·
Updated
2025-10-03
·
CVE-2024-53126
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 6.6.65
Description
A bug in the Linux kernel has been resolved, specifically in the vdpa: solidrun module. The issue arises in the
psnet open pf bar() and snet open vf bar() functions, where a string is placed on the stack and later passed to pcim iomap regions(). Since neither pcim iomap regions() nor the functions it calls copy the string, using the string later causes undefined behavior because the stack frame will have disappeared. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.Recommendations
For Linux Kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue.
As a temporary workaround, consider allocating strings on the heap through
devm kasprintf() instead of placing them on the stack to prevent undefined behavior.Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Linuxmint
Red Os
Suse
Ubuntu