CVE-2024-53145: um: Fix potential integer overflow during physmem setup
In the Linux kernel, the following vulnerability has been resolved:
um: Fix potential integer overflow during physmem setup
This issue happens when the real map size is greater than LONGMAX, which can be easily triggered on UML/i386.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53145?
CVE-2024-53145 has a high severity due to the potential for integer overflow during physical memory setup in the Linux kernel.
How do I fix CVE-2024-53145?
To fix CVE-2024-53145, update the Linux kernel to a version that includes the security patch addressing the vulnerability.
What versions of the Linux kernel are affected by CVE-2024-53145?
CVE-2024-53145 affects Linux kernel versions from 4.1 to 5.4.287, 5.5 to 5.10.231, 5.11 to 5.15.174, 5.16 to 6.1.120, 6.2 to 6.6.64, and 6.7 to 6.11.11.
What is the impact of exploiting CVE-2024-53145?
Exploiting CVE-2024-53145 may lead to denial of service due to a crash or instability in the affected Linux kernel.
Who is affected by CVE-2024-53145?
Users and organizations running vulnerable versions of the Linux kernel are at risk of issues related to CVE-2024-53145.