CVE-2024-53137

MEDIUM

Linux Kernel 6.10-6.11.9 - Denial of Service via Cacheflush Syscall

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/e6960a2ed49c9a25357817535f7cc50594a58604

Patch

https://git.kernel.org/stable/c/ca29cfcc4a21083d671522ad384532e28a43f033

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 7.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (9)

linux/Kernel 6.10.0 - 6.11.10linux

Linux/Linux < 6.10

Linux/Linux 6.10

Linux/Linux 6.11.10 - 6.11.*

Linux/Linux 6.12

Linux/Linux 7af5b901e84743c608aae90cb0e429702812c324 - ca29cfcc4a21083d671522ad384532e28a43f033

Linux/Linux 7af5b901e84743c608aae90cb0e429702812c324 - e6960a2ed49c9a25357817535f7cc50594a58604

linux/linux_kernel 6.12 rc1 (7 CPE variants)

linux/linux_kernel 6.10 - 6.11.10

Published Dec 04, 2024

Tracked Since Feb 18, 2026