CVE-2024-53072
Last modified
CVE-2024-53072 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amd_pmc module as: amd_pmc enable_stb=1 ...can result in the following messages in the kernel ring buffer: amd_pmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on RAM at 0x0000000000000000 - 0x0000000000ffffff WARNING: CPU: 10 PID: 2151 at arch/x86/mm/ioremap.c:217 __ioremap_caller+0x2cd/0x340 Further debugging reveals that this occurs when the requests for S2D_PHYS_ADDR_LOW and S2D_PHYS_ADDR_HIGH return a value of 0, indicating that the STB is inaccessible. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amd_pmc module as: amd_pmc enable_stb=1 ...can result in the following messages in the kernel ring buffer: amd_pmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on RAM at 0x0000000000000000 - 0x0000000000ffffff WARNING: CPU: 10 PID: 2151 at arch/x86/mm/ioremap.c:217 __ioremap_caller+0x2cd/0x340 Further debugging reveals that this occurs when the requests for S2D_PHYS_ADDR_LOW and S2D_PHYS_ADDR_HIGH return a value of 0, indicating that the STB is inaccessible. To prevent the ioremap warning and provide clarity to the user, handle the invalid address and display an error message.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | >= 5.18, < 6.1.117 | — |
| Linux | Linux Kernel | >= 6.2, < 6.6.61 | — |
| Linux | Linux Kernel | >= 6.7, < 6.11.8 | — |
| Linux | Linux Kernel | 6.12 | Rc1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-53072?
How severe is CVE-2024-53072?
How do I fix CVE-2024-53072?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-53067In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53068In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-53069In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-5307Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Infor…3.3
- CVE-2024-53070In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53071In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53073In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53074In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53075In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53076In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53077In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-53078In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2024-53072?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
