CVE-2024-53107: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
In the Linux kernel, the following vulnerability has been resolved:
fs/proc/taskmmu: prevent integer overflow in pagemapscangetargs()
The "arg->veclen" variable is a u64 that comes from the user at the start of the function. The "arg->veclen sizeof(struct pageregion))" multiplication can lead to integer wrapping. Use sizemul() to avoid that.
Also the sizeadd/mul() functions work on unsigned long so for 32bit systems we need to ensure that "arg->veclen" fits in an unsigned long.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Configuration
Update the fs/proc/task_mmu pagemap_scan_get_args() logic to use size_mul() to avoid integer wrapping in the expression 'arg->vec_len * sizeof(struct page_region)'. Ensure the user-provided 'arg->vec_len' (a u64 from user input) fits in the expected type/size used for subsequent computations on 32-bit systems.
Linux kernel (fs/proc/task_mmu) pagemap_scan_get_args() integer overflow handling = Use size_mul() for arg->vec_len * sizeof(struct page_region) instead of direct multiplication
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53107?
CVE-2024-53107 has been classified as having a medium severity level due to the potential for integer overflow leading to memory issues.
How do I fix CVE-2024-53107?
To fix CVE-2024-53107, update the Linux kernel to version 6.11.10 or later.
Which versions of the Linux kernel are affected by CVE-2024-53107?
CVE-2024-53107 affects Linux kernel versions from 6.7 up to and including 6.11.10 and all 6.12 release candidates.
What impact does CVE-2024-53107 have on system security?
CVE-2024-53107 can potentially allow for system instability and unauthorized access due to improper handling of user input.
Where can I find more information on CVE-2024-53107?
Detailed information about CVE-2024-53107 can be found in the official Linux kernel change logs.