PT-2024-35618 · Linux+6 · Linux Kernel+6
Published
2024-10-11
·
Updated
2025-05-28
·
CVE-2024-53172
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12.0-rc2
Description
The issue arises from the use of duplicate slab cache names in the UBI fast attaching process, specifically when
alloc ai() is invoked twice with the same slab cache name ubi aeb slab cache. This triggers warning messages, including a kernel WARNING. The problem can be reproduced by loading a UBI device by fastmap with CONFIG DEBUG VM=y.Recommendations
For Linux kernel versions prior to 6.12.0-rc2, the issue can be resolved by using different slab names for
alloc ai() callers. As a temporary workaround, consider restricting the use of the ubi aeb slab cache until a patch is available.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu