CVE-2024-53180 ALSA: pcm: Add sanity NULL check for the default mmap fault handler
A missing NULL check in the ALSA PCM mmap handler can cause a kernel panic, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53180?
CVE-2024-53180 is a medium-severity vulnerability in Linux kernel, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Add sanity NULL check for the default mmap fault handler
A driver might allow the mmap access before initializing its runtime->dma_area properly. Add a proper NULL check before passing to virt_to_page() for avoiding a panic.
Weakness: CWE-476
Which versions are affected by CVE-2024-53180?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53180?
Apply the vendor's patch.
Is CVE-2024-53180 being exploited?
There is no known exploitation of CVE-2024-53180 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-55709, AZL-55800, BELL-CVE-2024-53180, DEBIAN-CVE-2024-53180, GHSA-m75c-j939-x6c2, ROOT-OS-DEBIAN-11-CVE-2024-53180 and 1 more.