CVE-2024-53161

EDAC/bluefield: Fix potential integer overflow

State: Published
Severity: 5.5 Medium
Published: Dec 24, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

EDAC/bluefield: Fix potential integer overflow

The 64-bit argument for the "get DIMM info" SMC call consists of mem_ctrl_idx left-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as 32-bits wide the left-shift operation truncates the upper 16 bits of information during the calculation of the SMC argument.

The mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any potential integer overflow, i.e. loss of data from upper 16 bits.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 8cc31cfa36ff37aff399b72faa2ded58110112aeAffected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before e0269ea7a628fdeddd65b92fe29c09655dbb80b9Affected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 4ad7033de109d0fec99086f352f58a3412e378b8Affected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 578ca89b04680145d41011e7cec8806fefbb59e7Affected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before ac6ebb9edcdb7077e841862c402697c4c48a7c0aAffected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before fdb90006184aa84c7b4e09144ed0936d4e1891a7Affected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 000930193fe5eb79ce5563ee2e9ddb0c6e4e1bb5Affected 82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 1fe774a93b46bb029b8f6fa9d1f25affa53f06c6Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 8cc31cfa36ff37aff399b72faa2ded58110112aeAffected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before e0269ea7a628fdeddd65b92fe29c09655dbb80b9Affected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 4ad7033de109d0fec99086f352f58a3412e378b8Affected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 578ca89b04680145d41011e7cec8806fefbb59e7Affected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before ac6ebb9edcdb7077e841862c402697c4c48a7c0aAffected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before fdb90006184aa84c7b4e09144ed0936d4e1891a7Affected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 000930193fe5eb79ce5563ee2e9ddb0c6e4e1bb5Affected
82413e562ea6eadfb6de946dcc6f74af31d64e7f to before 1fe774a93b46bb029b8f6fa9d1f25affa53f06c6Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.