CVE-2024-53215

5.5 · MEDIUM

Published Dec 27, 2024 linux CWE-401 EPSS 0.22% (13th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-53215 is a medium-severity vulnerability affecting linux linux_kernel. It was published on December 27, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()

There's issue as follows:

RPC: Registered rdma transport module.

RPC: Registered rdma backchannel transport module.

RPC: Unregistered rdma transport module.

RPC: Unregistered rdma backchannel transport module.

BUG: unable to handle page fault for address: fffffbfff80c609a

PGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0

Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI

RIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0

Call Trace:

<TASK>

__die+0x1f/0x70

page_fault_oops+0x2cd/0x860

spurious_kernel_fault+0x36/0x450

do_kern_addr_fault+0xca/0x100

exc_page_fault+0x128/0x150

asm_exc_page_fault+0x26/0x30

percpu_counter_destroy_many+0xf7/0x2a0

mmdrop+0x209/0x350

finish_task_switch.isra.0+0x481/0x840

schedule_tail+0xe/0xd0

ret_from_fork+0x23/0x80

ret_from_fork_asm+0x1a/0x30

</TASK>

If register_sysctl() return NULL, then svc_rdma_proc_cleanu

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.12, < 5.15.174	Affected

References

Ref git.kernel.org/stable/c/1c9a99c89e45b22eb556fd2f3f729f2683f247d5 Ref git.kernel.org/stable/c/20322edcbad82a60321a8615a99ca73a9611115f Ref git.kernel.org/stable/c/94d2d6d398706ab7218a26d61e12919c4b498e09 Ref git.kernel.org/stable/c/a12c897adf40b6e2b4a56e6912380c31bd7b2479 Ref git.kernel.org/stable/c/ce89e742a4c12b20f09a43fec1b21db33f2166cd Ref git.kernel.org/stable/c/ebf47215d46992caea660ec01cd618005d9e687a Ref lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Frequently Asked Questions

What is CVE-2024-53215?

CVE-2024-53215 is a medium-severity vulnerability affecting linux linux_kernel. It was published on December 27, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-53215?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-53215?

How can CyberStrike help with CVE-2024-53215?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-53215 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719