Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-53110 Details

Description

In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix id_table array not null terminated error Allocate one extra virtio_device_id as null terminator, otherwise vdpa_mgmtdev_get_classes() may iterate multiple times and visit undefined memory.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0a886489d274596ad1a80789d3a773503210a615 kernel.orgPatch
https://git.kernel.org/stable/c/4e39ecadf1d2a08187139619f1f314b64ba7d947 kernel.orgPatch
https://git.kernel.org/stable/c/870d68fe17b5d9032049dcad98b5781a344a8657 kernel.orgPatch
https://git.kernel.org/stable/c/c4d64534d4b1c47d2f1ce427497f971ad4735aae kernel.orgPatch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html CVE

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-OtherWeakness Not in a Standard CWE Category[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.19, < 6.1.119
>= 6.2, < 6.6.63
>= 6.7, < 6.11.10
6.12 rc1
6.12 rc2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-53110
NVD Published Date:
Dec 2, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-53110 Details - Not Deferred