CVE-2024-53107

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns an integer overflow in the pagemap scan get args() function within the Linux kernel's fs/proc/task mmu component. The arg->vec len variable, a u64 value provided by the user, is multiplied by sizeof(struct page region), which can lead to integer wrapping. To prevent this, the size mul() function is utilized. Additionally, since the size add/mul() functions operate on unsigned long values, it is essential to ensure that arg->vec len fits within an unsigned long for 32-bit systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.