CVE-2024-53161

Summary

CVE-2024-53161 is a vulnerability affecting the Linux kernel. It involves a potential integer overflow in the EDAC/bluefield component. Specifically, the "get DIMM info" System Management Interrupt (SMC) call utilizes a 64-bit argument formed by left-shifting mem_ctrl_idx 16 bits and OR-ing it with the DIMM index. However, because mem_ctrl_idx is defined as 32-bits wide, the left-shift operation truncates the upper 16 bits of information, posing a risk of data loss. To mitigate this issue, mem_ctrl_idx should be defined as a 64-bit wide variable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.