PT-2024-35630 · Linux+5 · Linux Kernel+5

Anton Ivanov + 1 · Published 2024-12-27 · Updated 2025-05-28 · CVE-2024-53183

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of drvdata in release, which is not available, causing a crash when removing a network device. The crash results in a kernel panic due to a segfault with no mm. The vulnerability is resolved by using container of() to get the uml net instance instead of drvdata.

Recommendations For Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the removal of network devices to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-04318

CVE-2024-53183

DLA-4075-1

DLA-4076-1

OESA-2025-1034

OESA-2025-1095

OESA-2025-1096

USN-7276-1

USN-7277-1

USN-7310-1

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7391-1

USN-7392-1

USN-7392-2

USN-7392-3

USN-7392-4

USN-7393-1

USN-7401-1

USN-7407-1

USN-7413-1

USN-7421-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7463-1

USN-7468-1

USN-7523-1

USN-7524-1

USN-7539-1

USN-7540-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 1387

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53183.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://git.kernel.org/stable/c/d1db692a9be3b4bd3473b64fcae996afaffe8438 · Patch
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://git.kernel.org/stable/c/cdbd5a1dcdc2c27ac076f91b03b9add3fefa1a82 · Patch
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47684 · Security Note