CVE-2024-53172

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/12/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ubi: fastmap: Fix duplicate slab cache names while attaching<br /> <br /> Since commit 4c39529663b9 ("slab: Warn on duplicate cache names when<br /> DEBUG_VM=y"), the duplicate slab cache names can be detected and a<br /> kernel WARNING is thrown out.<br /> In UBI fast attaching process, alloc_ai() could be invoked twice<br /> with the same slab cache name &amp;#39;ubi_aeb_slab_cache&amp;#39;, which will trigger<br /> following warning messages:<br /> kmem_cache of name &amp;#39;ubi_aeb_slab_cache&amp;#39; already exists<br /> WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107<br /> __kmem_cache_create_args+0x100/0x5f0<br /> Modules linked in: ubi(+) nandsim [last unloaded: nandsim]<br /> CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2<br /> RIP: 0010:__kmem_cache_create_args+0x100/0x5f0<br /> Call Trace:<br /> __kmem_cache_create_args+0x100/0x5f0<br /> alloc_ai+0x295/0x3f0 [ubi]<br /> ubi_attach+0x3c3/0xcc0 [ubi]<br /> ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]<br /> ubi_init+0x3fb/0x800 [ubi]<br /> do_init_module+0x265/0x7d0<br /> __x64_sys_finit_module+0x7a/0xc0<br /> <br /> The problem could be easily reproduced by loading UBI device by fastmap<br /> with CONFIG_DEBUG_VM=y.<br /> Fix it by using different slab names for alloc_ai() callers.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.1 (including) 4.19.325 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.287 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.231 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.174 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.120 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.64 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.11.11 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.12 (including) 6.12.2 (excluding)