CVE-2024-53109

nommu: pass NULL argument to vma_iter_prealloc()

State: Published
Severity: 7.8 High
Published: Dec 2, 2024
Updated: Aug 5, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nommu: pass NULL argument to vma_iter_prealloc()

When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels crashed upon accessing a vma iterator, such as acct_collect() reading the size of vma entries after do_munmap().

This commit fixes this issue by passing a right argument to the preallocation call.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b5df09226450165c434084d346fcb6d4858b0d52 to before 8bbf0ab631cdf1dade6745f137cff98751e6ced7Affected b5df09226450165c434084d346fcb6d4858b0d52 to before aceaf33b7666b72dfb86e0aa977be81e3bcbc727Affected b5df09226450165c434084d346fcb6d4858b0d52 to before 247d720b2c5d22f7281437fd6054a138256986baAffected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.63 through 6.6.Not affected 6.11.10 through 6.11.Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.