Riskcovery

CVE-2024-53137

ARM: fix cacheflush with PAN

State
Published
Severity
5.5 Medium
Published
Dec 4, 2024
Updated
May 11, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: fix cacheflush with PAN

It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7af5b901e84743c608aae90cb0e429702812c324 to before e6960a2ed49c9a25357817535f7cc50594a58604Affected
  • 7af5b901e84743c608aae90cb0e429702812c324 to before ca29cfcc4a21083d671522ad384532e28a43f033Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.11.10 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.