{
  "cveId": "CVE-2024-53111",
  "url": "https://patchblox.com/security/cve/CVE-2024-53111",
  "summary": "CVE-2024-53111 is fixed in 26 products on 1 platform, first by DEBIAN-CVE-2024-53111, released December 2, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/mremap: fix address wraparound in move_page_t...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  mm/mremap: fix address wraparound in move_page_tables()  On 32-bit platforms, it is possible for the expression \u0060len \u002B old_addr \u003C old_end\u0060 to be false-positive if \u0060len \u002B old_addr\u0060 wraps around.  \u0060old_addr\u0060 is the cursor in the old range up to which page table entries have been moved; so if the operation succeeded, \u0060old_addr\u0060 is the *end* of the old region, and adding \u0060len\u0060 to it can wrap.  The overflow causes mremap() to mistakenly believe that PTEs have been copied; the consequence is that mremap() bails out, but doesn\u0027t move the PTEs back before the new VMA is unmapped, causing anonymous pages in the region to be lost.  So basically if userspace tries to mremap() a private-anon region and hits this bug, mremap() will return an error and the private-anon region\u0027s contents appear to have been zeroed.  The idea of this check is that \u0060old_end - len\u0060 is the original start address, and writing the check that way also makes it easier to read; so fix the check by rearranging the comparison accordingly.  (An alternate fix would be to refactor this function by introducing an \u0022orig_old_start\u0022 variable or such.)   Tested in a VM with a 32-bit X86 kernel; without the patch:  \u0060\u0060\u0060 user@horn:~/big_mremap$ cat test.c #define _GNU_SOURCE #include \u003Cstdlib.h\u003E #include \u003Cstdio.h\u003E #include \u003Cerr.h\u003E #include \u003Csys/mman.h\u003E  #define ADDR1 ((void*)0x60000000) #define ADDR2 ((void*)0x10000000) #define SIZE          0x50000000uL  int main(void) {   unsigned char *p1 = mmap(ADDR1, SIZE, PROT_READ|PROT_WRITE,       MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);   if (p1 == MAP_FAILED)     err(1, \u0022mmap 1\u0022);   unsigned char *p2 = mmap(ADDR2, SIZE, PROT_NONE,       MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);   if (p2 == MAP_FAILED)     err(1, \u0022mmap 2\u0022);   *p1 = 0x41;   printf(\u0022first char is 0x%02hhx\\n\u0022, *p1);   unsigned char *p3 = mremap(p1, SIZE, SIZE,       MREMAP_MAYMOVE|MREMAP_FIXED, p2);   if (p3 == MAP_FAILED) {     printf(\u0022mremap() failed; first char is 0x%02hhx\\n\u0022, *p1);   } else {     printf(\u0022mremap() succeeded; first char is 0x%02hhx\\n\u0022, *p3);   } } user@horn:~/big_mremap$ gcc -static -o test test.c user@horn:~/big_mremap$ setarch -R ./test first char is 0x41 mremap() failed; first char is 0x00 \u0060\u0060\u0060  With the patch:  \u0060\u0060\u0060 user@horn:~/big_mremap$ setarch -R ./test first char is 0x41 mremap() succeeded; first char is 0x41 \u0060\u0060\u0060",
  "published": "2024-12-02T14:15:11Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00209,
  "epssPercentile": 0.11152,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.12.coco15sp6.1",
      "fix": "SUSE-SU-2025:0289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0289-1",
      "released": "2025-01-29T16:11:29Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco_debug",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.12.coco15sp6.1",
      "fix": "SUSE-SU-2025:0289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0289-1",
      "released": "2025-01-29T16:11:29Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1.150600.12.14.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1.150600.12.14.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_7",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.3.1",
      "fix": "SUSE-SU-2025:0153-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0153-1",
      "released": "2025-01-17T09:14:12Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_7",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.23.1",
      "fix": "SUSE-SU-2025:0153-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0153-1",
      "released": "2025-01-17T09:14:12Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.23.1",
      "fix": "SUSE-SU-2025:0153-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0153-1",
      "released": "2025-01-17T09:14:12Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.12.coco15sp6.1",
      "fix": "SUSE-SU-2025:0289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0289-1",
      "released": "2025-01-29T16:11:29Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.23.1",
      "fix": "SUSE-SU-2025:0153-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0153-1",
      "released": "2025-01-17T09:14:12Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.23.1",
      "fix": "SUSE-SU-2025:0117-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0117-1",
      "released": "2025-01-15T09:07:49Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.12.coco15sp6.1",
      "fix": "SUSE-SU-2025:0289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0289-1",
      "released": "2025-01-29T16:11:29Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.23.1",
      "fix": "SUSE-SU-2025:0153-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0153-1",
      "released": "2025-01-17T09:14:12Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.33.1",
      "fix": "SUSE-SU-2025:0154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0154-1",
      "released": "2025-01-17T09:15:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.11.10-1",
      "fix": "DEBIAN-CVE-2024-53111",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-53111",
      "released": "2024-12-02T14:15:11Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.11.10-1",
      "fix": "DEBIAN-CVE-2024-53111",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-53111",
      "released": "2024-12-02T14:15:11Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}