Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2024-53113: Linux kernel may crash when moving tasks between cpusets
CVE-2024-53113 · published 1 year ago
Summary
The Linux kernel code that allocates memory pages could try to use a missing zone reference when a process is moved between different cpusets, causing the system to stop responding. This affects standard Linux kernels and several Canonical cloud images (Azure, AWS, HWE). Updating the kernel to the latest version, which adds a safety check for the missing reference, resolves the issue.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1080.87~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1086.95~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1081.90~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-136.147~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1074.77~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1077.83~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-135.146~20.04.1.
- Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
- Update canonical linux-gcp to version 6.8.0-1028.30.
- Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1023.27.
- Update canonical linux-gkeop to version 6.8.0-1010.12.
- Update canonical linux-ibm to version 6.8.0-1024.24.
- Update canonical linux-lowlatency to version 6.8.0-58.60.1.
- Update canonical linux-nvidia to version 6.8.0-1026.29.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1026.29.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
- Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
- Update canonical linux-oem-6.8 to version 6.8.0-1026.26.
- Update canonical linux-oracle to version 6.8.0-1024.25.
- Update canonical linux-raspi to version 6.8.0-1028.32.
- Update canonical linux-riscv to version 6.8.0-58.60.1.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-oracle-5.15 to version 5.15.0-1077.83~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1075.79~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
- Update canonical linux to version 5.15.0-135.146.
- Update canonical linux-aws to version 5.15.0-1080.87.
- Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
- Update canonical linux-azure to version 5.15.0-1084.93.
- Update canonical linux-azure-6.8 to version 6.8.0-1027.32~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1079.88.
- Update canonical linux-gcp-6.8 to version 6.8.0-1028.30~22.04.1.
- Update canonical linux-gke to version 5.15.0-1077.83.
- Update canonical linux-gkeop to version 5.15.0-1062.70.
- Update canonical linux-hwe-6.8 to version 6.8.0-58.60~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1072.75.
- Update canonical linux-ibm-6.8 to version 6.8.0-1024.24~22.04.1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1073.75.
- Update canonical linux-intel-iotg to version 5.15.0-1075.81.
- Update canonical linux-kvm to version 5.15.0-1076.81.
- Update canonical linux-lowlatency to version 5.15.0-135.146.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1074.75.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1026.29~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1033.33.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1021.21.
- Update canonical linux-oracle to version 5.15.0-1077.83.
- Update canonical linux-oracle-6.8 to version 6.8.0-1024.25~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1074.77.
- Update canonical linux-riscv-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1044.48.
- Update canonical linux-bluefield to version 5.15.0-1062.64.
- Update canonical linux-aws-fips to version 5.15.0-1080.87+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1083.92+fips1.
- Update canonical linux-fips to version 5.15.0-135.146+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1079.88+fips1.
- Update canonical linux-realtime to version 5.15.0-1080.88.
- Update canonical linux-realtime-6.8 to version 6.8.1-1020.21~22.04.1.
- Update canonical linux to version 6.8.0-58.60.
- Update canonical linux-aws to version 6.8.0-1027.29.
- Update canonical linux-azure to version 6.8.0-1027.32.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
- Update canonical linux-realtime to version 6.8.1-1020.21.
- Update debian linux to version 6.1.119-1.
- Update debian linux to version 6.11.10-1.
- Update canonical linux-azure-fde to version 5.15.0-1084.93.1.
- Update linux kernel to version 6.11.10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.13, < 6.1.119 >= 6.2, < 6.6.63 >= 6.7, < 6.11.10 6.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1080.87~20.04.1 Fix: upgrade to 5.15.0-1080.87~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1086.95~20.04.1 Fix: upgrade to 5.15.0-1086.95~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1081.90~20.04.1 Fix: upgrade to 5.15.0-1081.90~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-136.147~20.04.1 Fix: upgrade to 5.15.0-136.147~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1074.77~20.04.1 Fix: upgrade to 5.15.0-1074.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1077.83~20.04.1 Fix: upgrade to 5.15.0-1077.83~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-135.146~20.04.1 Fix: upgrade to 5.15.0-135.146~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1012.12~24.04.1 Fix: upgrade to 6.11.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1014.15 Fix: upgrade to 6.8.0-1014.15
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1028.30 Fix: upgrade to 6.8.0-1028.30
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1011.11~24.04.1 Fix: upgrade to 6.11.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1023.27 Fix: upgrade to 6.8.0-1023.27
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1010.12 Fix: upgrade to 6.8.0-1010.12
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1024.24 Fix: upgrade to 6.8.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1026.29 Fix: upgrade to 6.8.0-1026.29
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1007.7 Fix: upgrade to 6.11.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1026.29.1 Fix: upgrade to 6.8.0-1026.29.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1015.15 Fix: upgrade to 6.11.0-1015.15
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1026.26 Fix: upgrade to 6.8.0-1026.26
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1024.25 Fix: upgrade to 6.8.0-1024.25
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1028.32 Fix: upgrade to 6.8.0-1028.32
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1077.83~20.04.1 Fix: upgrade to 5.15.0-1077.83~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1075.79~20.04.1 Fix: upgrade to 5.15.0-1075.79~20.04.1
|
Showing 50 of 156. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1039.39~20.04.1 Fix: upgrade to 5.15.0-1039.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-135.146 Fix: upgrade to 5.15.0-135.146
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1080.87 Fix: upgrade to 5.15.0-1080.87
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1027.29~22.04.1 Fix: upgrade to 6.8.0-1027.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1084.93 Fix: upgrade to 5.15.0-1084.93
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1027.32~22.04.1 Fix: upgrade to 6.8.0-1027.32~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1084.93.1 Fix: upgrade to 5.15.0-1084.93.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1079.88 Fix: upgrade to 5.15.0-1079.88
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1028.30~22.04.1 Fix: upgrade to 6.8.0-1028.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1077.83 Fix: upgrade to 5.15.0-1077.83
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1062.70 Fix: upgrade to 5.15.0-1062.70
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-58.60~22.04.1 Fix: upgrade to 6.8.0-58.60~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1072.75 Fix: upgrade to 5.15.0-1072.75
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1024.24~22.04.1 Fix: upgrade to 6.8.0-1024.24~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1073.75 Fix: upgrade to 5.15.0-1073.75
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1075.81 Fix: upgrade to 5.15.0-1075.81
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1076.81 Fix: upgrade to 5.15.0-1076.81
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-135.146 Fix: upgrade to 5.15.0-135.146
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1074.75 Fix: upgrade to 5.15.0-1074.75
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1026.29~22.04.1 Fix: upgrade to 6.8.0-1026.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1033.33 Fix: upgrade to 5.15.0-1033.33
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1021.21 Fix: upgrade to 5.15.0-1021.21
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1077.83 Fix: upgrade to 5.15.0-1077.83
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1024.25~22.04.1 Fix: upgrade to 6.8.0-1024.25~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1074.77 Fix: upgrade to 5.15.0-1074.77
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1044.48 Fix: upgrade to 5.15.0-1044.48
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1062.64 Fix: upgrade to 5.15.0-1062.64
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1080.87+fips1 Fix: upgrade to 5.15.0-1080.87+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1083.92+fips1 Fix: upgrade to 5.15.0-1083.92+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-135.146+fips1 Fix: upgrade to 5.15.0-135.146+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1079.88+fips1 Fix: upgrade to 5.15.0-1079.88+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1080.88 Fix: upgrade to 5.15.0-1080.88
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1020.21~22.04.1 Fix: upgrade to 6.8.1-1020.21~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-58.60 Fix: upgrade to 6.8.0-58.60
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1027.29 Fix: upgrade to 6.8.0-1027.29
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1027.32 Fix: upgrade to 6.8.0-1027.32
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2023.24 Fix: upgrade to 6.8.0-2023.24
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1020.21 Fix: upgrade to 6.8.1-1020.21
|
| Debian:12 | debian | linux |
< 6.1.119-1 Fix: upgrade to 6.1.119-1
|
| Debian:13 | debian | linux |
< 6.11.10-1 Fix: upgrade to 6.11.10-1
|
| Linux | linux | kernel |
>= 6.7.0, < 6.11.10 Fix: upgrade to 6.11.10
|
Original advisory text
mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggered a NULL pointer dereference for ac.preferred_zoneref->zone in alloc_pages_bulk_noprof() when the task is migrated between cpusets. When cpuset is enabled, in prepare_alloc_pages(), ac->nodemask may be ¤t->mems_allowed. when first_zones_zonelist() is called to find preferred_zoneref, the ac->nodemask may be modified concurrently if the task is migrated between different cpusets. Assuming we have 2 NUMA Node, when traversing Node1 in ac->zonelist, the nodemask is 2, and when traversing Node2 in ac->zonelist, the nodemask is 1. As a result, the ac->preferred_zoneref points to NULL zone. In alloc_pages_bulk_noprof(), for_each_zone_zonelist_nodemask() finds a allowable zone and calls zonelist_node_idx(ac.preferred_zoneref), leading to NULL pointer dereference. __alloc_pages_noprof() fixes this issue by checking NULL pointer in commit ea57485af8f4 ("mm, page_alloc: fix check for NULL preferred_zone") and commit df76cee6bbeb ("mm, page_alloc: remove redundant checks from alloc fastpath"). To fix it, check NULL pointer for preferred_zoneref->zone.
References
- https://git.kernel.org/stable/c/903d896448c2e50e8652aaba529a30d4d1eaa0e5 URL
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://ubuntu.com/security/CVE-2024-53113 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-53113 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-53113 Vendor Advisory
- https://git.kernel.org/stable/c/31502374627ba9ec3e710dbd0bb00457cc6d2c19 URL
- https://git.kernel.org/linus/8ce41b0f9d77cca074df25afd39b86e2ee3aa68e Third Party Advisory
- https://ubuntu.com/security/notices/USN-7276-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7277-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7310-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7387-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7388-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7389-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7390-1 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53113... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-53113 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/6addb2d9501ec866d7b3a3b4e665307c437e9be2 URL
- https://git.kernel.org/stable/c/8ce41b0f9d77cca074df25afd39b86e2ee3aa68e URL
- https://git.kernel.org/stable/c/d0f16cec79774c3132df006cf771eddd89d08f58 URL
- https://ubuntu.com/security/notices/USN-7387-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7387-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7407-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7421-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7450-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7451-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7452-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7453-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7458-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7459-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7459-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7468-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7523-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7524-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-476NULL Pointer Dereference
Timeline
Published2 Dec 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-53113 · NVD
UBUNTU-CVE-2024-53113 · OSV
DEBIAN-CVE-2024-53113 · OSV
CVE-2024-53113 · OSV
Track software like this
Free during beta