CVE-2024-53148: comedi: Flush partial mappings in error case
In the Linux kernel, the following vulnerability has been resolved:
comedi: Flush partial mappings in error case
If some remappfnrange() calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedibufmapput(bm). The userspace mappings are only cleaned up later in the mmap error path.
Fix it by explicitly flushing all mappings in our VMA on the error path.
See commit 79a61cc3fc04 ("mm: avoid leaving partial pfn mappings around in error case").
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 79a61cc3fc04 - Operational
In comedi, flush partial/partial PFN mappings on the remap_pfn_range() error path so that userspace buffer pages are not left mapped after dropping the buffer reference with comedi_buf_map_put(bm); this prevents relying on later cleanup in the mmap error path.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53148?
CVE-2024-53148 has a moderate severity rating due to the potential for userspace memory access issues.
How do I fix CVE-2024-53148?
To resolve CVE-2024-53148, update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2024-53148?
CVE-2024-53148 affects various versions of the Linux kernel used in many Linux distributions.
What are the potential impacts of CVE-2024-53148?
The potential impacts of CVE-2024-53148 include unauthorized access to userspace memory by an attacker.
Is there a workaround for CVE-2024-53148?
Currently, there are no officially recommended workarounds for CVE-2024-53148; applying the patch is the best mitigation.