CVE-2024-53126
kernel: vdpa: solidrun: Fix UB bug with devres
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 4, 2024
Updated · September 28, 2026
Description
A flaw was found in the Linux kernel's vhost Data Path Acceleration (vDPA) SolidRun driver. A temporary string allocated on the stack is passed to a resource management function without being copied, leaving a reference to invalid stack memory once the function exits. A local user with administrative privileges could trigger this flaw during device initialization to cause memory corruption, resulting in a Denial of Service (DoS) via a system crash.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-758 · Reliance on Undefined, Unspecified, or Implementation-Defined Behavior