CVE-2024-53180: ALSA: pcm: Add sanity NULL check for the default mmap fault handler
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Add sanity NULL check for the default mmap fault handler
A driver might allow the mmap access before initializing its runtime->dmaarea properly. Add a proper NULL check before passing to virttopage() for avoiding a panic.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53180?
The severity of CVE-2024-53180 has been classified as moderate.
How do I fix CVE-2024-53180?
To fix CVE-2024-53180, update the Linux kernel to a version that is greater than 5.15.174 or between the versions of 5.16 and 6.1.120, or between 6.2 and 6.6.64, or between 6.7 and 6.11.11, or at least 6.12.2.
Which versions of the Linux kernel are affected by CVE-2024-53180?
CVE-2024-53180 affects multiple versions, specifically kernels from 5.15.0 to 5.15.174, 5.16.0 to 6.1.120, 6.2.0 to 6.6.64, and 6.7.0 to 6.11.11, as well as 6.12.0 to 6.12.2.
What type of vulnerability is CVE-2024-53180?
CVE-2024-53180 is related to a memory management issue in the ALSA pcm subsystem of the Linux kernel.
Is there a workaround for CVE-2024-53180?
There is no specific workaround for CVE-2024-53180; updating the kernel is the recommended approach.