CVE-2024-53151
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 24, 2024
Updated: Jan 7, 2025
CWE ID 190
Summary
CVE-2024-53151: In the Linux kernel, an integer overflow vulnerability was identified in the svcrdma driver. A commit from June 2020 introduced a potential user-controlled 'segcount' variable that, if larger than SIZE_MAX/16 on 32-bit systems, can cause an integer overflow. This issue may lead to a buffer overflow in the 'xdr_inline_decode' function, which could be exploited by malicious users. The vulnerability has been resolved.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.