CVE-2024-53111

Summary

CVE-2024-53111 is a vulnerability affecting the Linux kernel on 32-bit platforms. In the `mm/mremap` function, a condition can result in a false positive, causing `len + old_addr` to wrap around and giving a false sense of PTE copy completion. This mistake leads `mremap()` to mistakenly believe that the page table entries have been copied, resulting in the loss of anonymous pages in the region. This issue causes mremap() to return an error, and the private-anon region's contents appear to have been zeroed. The vulnerability can be mitigated by rearranging the comparison in the check to ensure `old_end - len` is the original start address. Without the patch, the test code demonstrates the issue, resulting in a failed `mremap()` call and the loss of data. With the patch, the `mremap()` call succeeds as intended.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.