#VU102222 Improper Initialization in Linux kernel - CVE-2024-53180

Vulnerability identifier: #VU102222

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53180

CWE-ID: CWE-665

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper initialization within the snd_pcm_mmap_data_fault() function in sound/core/pcm_native.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/0c4c9bf5eab7bee6b606f2abb0993e933b5831a0
https://git.kernel.org/stable/c/832efbb74b1578e3737d593a204d42af8bd1b81b
https://git.kernel.org/stable/c/8799f4332a9fd812eadfbc32fc5104d6292f754f
https://git.kernel.org/stable/c/bc200027ee92fba84f1826494735ed675f3aa911
https://git.kernel.org/stable/c/d2913a07d9037fe7aed4b7e680684163eaed6bc4
https://git.kernel.org/stable/c/f0ce9e24eff1678c16276f9717f26a78202506a2

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.