CVE-2024-53137: ARM: fix cacheflush with PAN
In the Linux kernel, the following vulnerability has been resolved:
ARM: fix cacheflush with PAN
It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53137?
CVE-2024-53137 has been classified with a low severity due to its specific impact on certain Linux kernel versions.
How do I fix CVE-2024-53137?
To fix CVE-2024-53137, update your Linux kernel to version 6.12 or newer, as well as any stable release that includes the patch.
Which Linux kernel versions are affected by CVE-2024-53137?
Linux kernel versions from 6.10 up to 6.11.10, as well as 6.12-rc1 through 6.12-rc7, are affected by CVE-2024-53137.
Is CVE-2024-53137 a remote attack vector vulnerability?
CVE-2024-53137 does not present a remote attack vector and primarily impacts local user operations.
What are the implications of CVE-2024-53137 for users?
Users running affected Linux kernel versions may experience faults during cache maintenance operations, potentially impacting system performance.