CVE-2024-53151

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an integer overflow in the svcrdma component of the Linux kernel. This overflow can be triggered by a user-controlled value, potentially allowing an attacker to execute arbitrary code. The problem arises from a commit in the Linux kernel that introduced a "parsed chunk list" data structure, leading to a warning from the Smatch static checker about a potential user-controlled sizeof overflow. The segcount variable, an untrusted u32, is used in a calculation that can cause an integer overflow on 32-bit systems, which may be accepted by xdr inline decode().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.