CVE-2024-53161
MEDIUMLinux Kernel Integer Overflow in EDAC Bluefield DIMM Info SMC Argument
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of mem_ctrl_idx left-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as 32-bits wide the left-shift operation truncates the upper 16 bits of information during the calculation of the SMC argument. The mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any potential integer overflow, i.e. loss of data from upper 16 bits.
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0021
EPSS Percentile
11.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (26)
linux/Kernel
5.11.0 - 5.15.174linux
linux/Kernel
5.16.0 - 6.1.120linux
linux/Kernel
5.4.0 - 5.4.287linux
linux/Kernel
5.5.0 - 5.10.231linux
linux/Kernel
6.12.0 - 6.12.2linux
linux/Kernel
6.2.0 - 6.6.64linux
linux/Kernel
6.7.0 - 6.11.11linux
Linux/Linux
< 5.4
Linux/Linux
5.10.231 - 5.10.*
Linux/Linux
5.15.174 - 5.15.*
... and 16 more
Published
Dec 24, 2024
Tracked Since
Feb 18, 2026