PT-2024-35658 · Linux · Linux Kernel

Syzbot · Published 2024-11-26 · Updated 2025-01-01 · CVE-2024-53211

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel. The issue is related to the net/l2tp module, specifically in the l2tp exit net function. The problem occurs when the IDR (ID Resolver) is not properly checked for emptiness before destruction, potentially leading to a warning. This is caused by the radix tree of the IDR containing internal radix-tree nodes, which are cleaned by idr destroy. The vulnerability can be provoked by forcing memory allocation failures in idr alloc 32.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Improper Resource Release

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-404

CWE-770

Related Identifiers

BDU:2026-04531

CVE-2024-53211

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53211.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-53211 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53211 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-53211 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-53211 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://git.kernel.org/stable/c/a487cc8986d6dd75b60b59004f3bd2ea9b4dd541 · Patch
• https://git.kernel.org/stable/c/5d066766c5f1252f98ff859265bcd1a5b52ac46c · Patch
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-53211 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04531 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-53211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53211 · Security Note
• https://ubuntu.com/security/CVE-2024-53211 · Vendor Advisory
• https://twitter.com/CVEnew/status/1872646928669818881 · Twitter Post