cbcvebase.
CVE-2024-53145
published 2024-12-24

CVE-2024-53145: In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.2th percentile
In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
debianlinux-6.1< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
linuxlinux
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < 5c710f45811e7e2bfcf703980c306f19c7e1ecfe5c710f45811e7e2bfcf703980c306f19c7e1ecfe
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < e6102b72edc4eb8c0858df00ba74b5ce579c8fa2e6102b72edc4eb8c0858df00ba74b5ce579c8fa2
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < 1bd118c5f887802cef2d9ba0d1917258667f1cae1bd118c5f887802cef2d9ba0d1917258667f1cae
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < 1575df968650d11771359e5ac78278c5b0cc19f31575df968650d11771359e5ac78278c5b0cc19f3
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < a875c023155ea92b75d6323977003e64d92ae7fca875c023155ea92b75d6323977003e64d92ae7fc
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < d1a211e5210d31da8f49fc0021bf7129b726468cd1a211e5210d31da8f49fc0021bf7129b726468c
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < a9c95f787b88b29165563fd97761032db77116e7a9c95f787b88b29165563fd97761032db77116e7
linuxlinux>= fe205bdd1321f95f8f3c35d243ea7cb22af8fbe1 < a98b7761f697e590ed5d610d87fa12be66f23419a98b7761f697e590ed5d610d87fa12be66f23419
linuxlinux_kernel>= 0 < 5.10.234-15.10.234-1
linuxlinux_kernel>= 0 < 6.1.123-16.1.123-1
linuxlinux_kernel>= 0 < 6.12.3-16.12.3-1
linuxlinux_kernel>= 0 < 6.12.3-16.12.3-1
linuxlinux_kernel>= 0 < 5.4.0-211.2315.4.0-211.231
linuxlinux_kernel>= 0 < 5.15.0-135.1465.15.0-135.146
linuxlinux_kernel>= 0 < 6.8.0-58.606.8.0-58.60
linuxlinux_kernel>= 0 < 6.11.0-18.186.11.0-18.18
linuxlinux_kernel>= 4.1 < 5.4.2875.4.287
linuxlinux_kernel>= 5.11 < 5.15.1745.15.174
linuxlinux_kernel>= 5.16 < 6.1.1206.1.120
linuxlinux_kernel>= 5.5 < 5.10.2315.10.231
linuxlinux_kernel>= 6.12 < 6.12.26.12.2
linuxlinux_kernel>= 6.2 < 6.6.646.6.64

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.