5.5

CVE-2024-53112: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-53112DEBIAN-CVE-2024-53112
Published 02-12-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-53112 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.8% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 56 · Related 54
DLA-4008-1DLA-4075-1MGASA-2024-0392MGASA-2024-0393SUSE-SU-2024:4314-1SUSE-SU-2024:4316-1

Timeline

  1. 02-12-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? ocfs2_set_new_buffer_uptodate+0x145/0x160 ? do_error_trap+0x1dc/0x2c0 ? ocfs2_set_new_buffer_uptodate+0x145/0x160 ? __pfx_do_error_trap+0x10/0x10 ? handle_invalid_op+0x34/0x40 ? ocfs2_set_new_buffer_uptodate+0x145/0x160 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? ocfs2_set_new_buffer_uptodate+0x2e/0x160 ? ocfs2_set_new_buffer_uptodate+0x144/0x160 ? ocfs2_set_new_buffer_uptodate+0x145/0x160 ocfs2_group_add+0x39f/0x15a0 ? __pfx_ocfs2_group_add+0x10/0x10 ? __pfx_lock_acquire+0x10/0x10 ? mnt_get_write_access+0x68/0x2b0 ? __pfx_lock_release+0x10/0x10 ? rcu_read_lock_any_held+0xb7/0x160 ? __pfx_rcu_read_lock_any_held+0x10/0x10 ? smack_log+0x123/0x540 ? mnt_get_write_access+0x68/0x2b0 ? mnt_get_write_access+0x68/0x2b0 ? mnt_get_write_access+0x226/0x2b0 ocfs2_ioctl+0x65e/0x7d0 ? __pfx_ocfs2_ioctl+0x10/0x10 ? smack_file_ioctl+0x29e/0x3a0 ? __pfx_smack_file_ioctl+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x43d/0x780 ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 ? __pfx_ocfs2_ioctl+0x10/0x10 __se_sys_ioctl+0xfb/0x170 do_syscall_64+0xf3/0x230 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... </TASK> When 'ioctl(OCFS2_IOC_GROUP_ADD, ...)' has failed for the particular inode in 'ocfs2_verify_group_and_input()', corresponding buffer head remains cached and subsequent call to the same 'ioctl()' for the same inode issues the BUG() in 'ocfs2_set_new_buffer_uptodate()' (trying to cache the same buffer head of that inode). Fix this by uncaching the buffer head with 'ocfs2_remove_from_cache()' on error path in 'ocfs2_group_add()'.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.25% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu134 products
  • linuxAll versions (No fix recorded) | < 4.4.0-276.310 | < 4.15.0-245.257 | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1150.156 | < 4.4.0-1188.203 | < 4.15.0-1187.200 | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < ac0cfe8ac35cf1be54131b90d114087b558777ca | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 5ae8cc0b0c027e9cab22596049bc4dd1cbc37ee4 | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 28d4ed71ae0b4baedca3e85ee6d8f227ec75ebf6 | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 0e04746db2ec4aec04cef5763b9d9aa32829ae2f | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 620d22598110b0d0cb97a3fcca65fc473ea86e73 | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 843dfc804af4b338ead42331dd58081b428ecdf8 | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < b751c50e19d66cfb7360c0b55cf17b0722252d12 | ≥ 7909f2bf835376a20d6dbf853eb459a27566eba2, < 737f34137844d6572ab7d473c998c7f977ff30eb | 2.6.25
  • linux_kernel≥ 2.6.25, < 4.19.325 | ≥ 4.20, < 6.1.119 | ≥ 6.2, < 6.6.63 | ≥ 6.7, < 6.11.10 | 6.12:rc1 | 6.12:rc2 | 6.12:rc3 | 6.12:rc4 | 6.12:rc5 | 6.12:rc6 | 6.12:rc7
Debian1 product
  • linux< 6.1.119-1 | < 6.11.10-1

3 vendors · 137 products

References

57 links
Show all 57 references