CVE-2024-53690

5.5 · MEDIUM

Published Jan 11, 2025 linux EPSS 0.25% (17th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-53690 is a medium-severity vulnerability affecting linux linux_kernel. It was published on January 11, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: prevent use of deleted inode

syzbot reported a WARNING in nilfs_rmdir. [1]

Because the inode bitmap is corrupted, an inode with an inode number that

should exist as a ".nilfs" file was reassigned by nilfs_mkdir for "file0",

causing an inode duplication during execution. And this causes an

underflow of i_nlink in rmdir operations.

The inode is used twice by the same task to unmount and remove directories

".nilfs" and "file0", it trigger warning in nilfs_rmdir.

Avoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means

that this inode has been deleted, and iput is executed to reclaim it.

[1]

WARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407

...

Call Trace:

<TASK>

nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342

vfs_rmdir+0x3a3/0x510 fs/namei.c:4394

do_rmdir+0x3b5/0x580 fs/namei.c:4453

__do_sys_rmdir fs/namei.c:4472 [inline]

__se_sys_rmdir fs/namei.c:4470 [inl

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 2.6.30, < 5.4.289	Affected

References

Ref git.kernel.org/stable/c/284760b320a0bac411b18108316939707dccb12b Ref git.kernel.org/stable/c/55e4baa0d32f0530ddc64c26620e1f2f8fa2724c Ref git.kernel.org/stable/c/5d4ed71327b0b5f3b179a19dc3c06be9509ab3db Ref git.kernel.org/stable/c/901ce9705fbb9f330ff1f19600e5daf9770b0175 Ref git.kernel.org/stable/c/912188316a8c9e41b8c1603c2276a05043b14f96 Ref git.kernel.org/stable/c/ef942d233643777f7b2a5deef620e82942983143 Ref git.kernel.org/stable/c/ff561987ff12b6a3233431ff659b5d332e22f153 Ref lists.debian.org/debian-lts-announce/2025/03/msg00001.html Ref lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Frequently Asked Questions

What is CVE-2024-53690?

CVE-2024-53690 is a medium-severity vulnerability affecting linux linux_kernel. It was published on January 11, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-53690?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-53690?

How can CyberStrike help with CVE-2024-53690?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-53690 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719