CVE-2024-53187: io_uring: check for overflows in io_pin_pages
Published Dec 27, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
3 affected componentsFixes available
Linux Linux kernel<6.11.11
Linux Linux kernel>=6.12<6.12.2
debian/linux<=6.1.176-1, <=6.1.187-1
6.12.107-16.12.111-17.2.9-17.2.10-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Dec 27, 2024
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
Description
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 13, 2026
Data Sourced
via Debian·04:45 PM
DescriptionAffected Software
Data Sourced
via Launchpad·04:45 PM
Description
Oct 14, 2026
Data Sourced
via Ubuntu·04:46 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-53187?
CVE-2024-53187 has a high severity due to potential memory overflow vulnerabilities in the Linux kernel's io_uring functionality.
2
How do I fix CVE-2024-53187?
To fix CVE-2024-53187, update the Linux kernel to version 6.12.2 or later.
3
Which Linux kernel versions are affected by CVE-2024-53187?
CVE-2024-53187 affects Linux kernel versions up to 6.11.11 and from 6.12 to 6.12.2.
4
What components are impacted by CVE-2024-53187?
CVE-2024-53187 specifically impacts the io_uring component in the Linux kernel.
5
What potential risks are associated with CVE-2024-53187?
The risks associated with CVE-2024-53187 include possible system crashes and unauthorized access due to memory overflows.