CVE-2024-53126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.6.65

Description A bug in the Linux kernel has been resolved, specifically in the vdpa: solidrun module. The issue arises in the psnet open pf bar() and snet open vf bar() functions, where a string is placed on the stack and later passed to pcim iomap regions(). Since neither pcim iomap regions() nor the functions it calls copy the string, using the string later causes undefined behavior because the stack frame will have disappeared. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Linux Kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue. As a temporary workaround, consider allocating strings on the heap through devm kasprintf() instead of placing them on the stack to prevent undefined behavior.