Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-53187

io_uring: check for overflows in io_pin_pages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144 CPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0 Call Trace: <TASK> __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183 io_rings_map io_uring/io_uring.c:2611 [inline] io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470 io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692 io_uring_setup io_uring/io_uring.c:3781 [inline] ... </TASK> io_pin_pages()'s uaddr parameter came directly from the user and can be garbage. Don't just add size to it as it can overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < 1a0aecabff72a95d240e6d7645949bfe0620dcd7affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < 29eac3eca72d4c2a71122050c37cd7d8f73ac4f3affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < aaa90844afd499c9142d0199dfda74439314c013affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < 0c0a4eae26ac78379d0c1db053de168a8febc6c9affected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References