GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-53215 (GCVE-0-2024-53215)

Vulnerability from cvelistv5 – Published: 2024-12-27 13:50 – Updated: 2026-05-11 20:53
VLAI
Title
svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
Summary
In the Linux kernel, the following vulnerability has been resolved: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() There's issue as follows: RPC: Registered rdma transport module. RPC: Registered rdma backchannel transport module. RPC: Unregistered rdma transport module. RPC: Unregistered rdma backchannel transport module. BUG: unable to handle page fault for address: fffffbfff80c609a PGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI RIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0 Call Trace: <TASK> __die+0x1f/0x70 page_fault_oops+0x2cd/0x860 spurious_kernel_fault+0x36/0x450 do_kern_addr_fault+0xca/0x100 exc_page_fault+0x128/0x150 asm_exc_page_fault+0x26/0x30 percpu_counter_destroy_many+0xf7/0x2a0 mmdrop+0x209/0x350 finish_task_switch.isra.0+0x481/0x840 schedule_tail+0xe/0xd0 ret_from_fork+0x23/0x80 ret_from_fork_asm+0x1a/0x30 </TASK> If register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not destroy the percpu counters which init in svc_rdma_proc_init(). If CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the 'percpu_counters' list. The above issue may occur once the module is removed. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory leakage occurs. To solve above issue just destroy all percpu counters when register_sysctl() return NULL.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 20:03 UTC
CWE
  • CWE-401 - Missing Release of Memory after Effective Lifetime
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < a12c897adf40b6e2b4a56e6912380c31bd7b2479 (git)
Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < 94d2d6d398706ab7218a26d61e12919c4b498e09 (git)
Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < 1c9a99c89e45b22eb556fd2f3f729f2683f247d5 (git)
Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < ebf47215d46992caea660ec01cd618005d9e687a (git)
Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < 20322edcbad82a60321a8615a99ca73a9611115f (git)
Affected: df971cd853c05778ae1175e8aeb80a04bb9d4be5 , < ce89e742a4c12b20f09a43fec1b21db33f2166cd (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.12
Unaffected: 0 , < 5.12 (semver)
Unaffected: 5.15.174 , ≤ 5.15.* (semver)
Unaffected: 6.1.120 , ≤ 6.1.* (semver)
Unaffected: 6.6.64 , ≤ 6.6.* (semver)
Unaffected: 6.11.11 , ≤ 6.11.* (semver)
Unaffected: 6.12.2 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:03:29.887526Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-401",
                "description": "CWE-401 Missing Release of Memory after Effective Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:07:19.322Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:47:43.981Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtrdma/svc_rdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a12c897adf40b6e2b4a56e6912380c31bd7b2479",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            },
            {
              "lessThan": "94d2d6d398706ab7218a26d61e12919c4b498e09",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            },
            {
              "lessThan": "1c9a99c89e45b22eb556fd2f3f729f2683f247d5",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            },
            {
              "lessThan": "ebf47215d46992caea660ec01cd618005d9e687a",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            },
            {
              "lessThan": "20322edcbad82a60321a8615a99ca73a9611115f",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            },
            {
              "lessThan": "ce89e742a4c12b20f09a43fec1b21db33f2166cd",
              "status": "affected",
              "version": "df971cd853c05778ae1175e8aeb80a04bb9d4be5",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtrdma/svc_rdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.174",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.174",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.120",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.64",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.11",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.2",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\n\nThere\u0027s issue as follows:\nRPC: Registered rdma transport module.\nRPC: Registered rdma backchannel transport module.\nRPC: Unregistered rdma transport module.\nRPC: Unregistered rdma backchannel transport module.\nBUG: unable to handle page fault for address: fffffbfff80c609a\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\nCall Trace:\n \u003cTASK\u003e\n __die+0x1f/0x70\n page_fault_oops+0x2cd/0x860\n spurious_kernel_fault+0x36/0x450\n do_kern_addr_fault+0xca/0x100\n exc_page_fault+0x128/0x150\n asm_exc_page_fault+0x26/0x30\n percpu_counter_destroy_many+0xf7/0x2a0\n mmdrop+0x209/0x350\n finish_task_switch.isra.0+0x481/0x840\n schedule_tail+0xe/0xd0\n ret_from_fork+0x23/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\ndestroy the percpu counters which init in svc_rdma_proc_init().\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\nleakage occurs.\nTo solve above issue just destroy all percpu counters when\nregister_sysctl() return NULL."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:53:04.457Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a12c897adf40b6e2b4a56e6912380c31bd7b2479"
        },
        {
          "url": "https://git.kernel.org/stable/c/94d2d6d398706ab7218a26d61e12919c4b498e09"
        },
        {
          "url": "https://git.kernel.org/stable/c/1c9a99c89e45b22eb556fd2f3f729f2683f247d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/ebf47215d46992caea660ec01cd618005d9e687a"
        },
        {
          "url": "https://git.kernel.org/stable/c/20322edcbad82a60321a8615a99ca73a9611115f"
        },
        {
          "url": "https://git.kernel.org/stable/c/ce89e742a4c12b20f09a43fec1b21db33f2166cd"
        }
      ],
      "title": "svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53215",
    "datePublished": "2024-12-27T13:50:00.688Z",
    "dateReserved": "2024-11-19T17:17:25.023Z",
    "dateUpdated": "2026-05-11T20:53:04.457Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53215",
      "date": "2026-09-16",
      "epss": "0.00222",
      "percentile": "0.12878"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\\n\\nThere\u0027s issue as follows:\\nRPC: Registered rdma transport module.\\nRPC: Registered rdma backchannel transport module.\\nRPC: Unregistered rdma transport module.\\nRPC: Unregistered rdma backchannel transport module.\\nBUG: unable to handle page fault for address: fffffbfff80c609a\\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\\nCall Trace:\\n \u003cTASK\u003e\\n __die+0x1f/0x70\\n page_fault_oops+0x2cd/0x860\\n spurious_kernel_fault+0x36/0x450\\n do_kern_addr_fault+0xca/0x100\\n exc_page_fault+0x128/0x150\\n asm_exc_page_fault+0x26/0x30\\n percpu_counter_destroy_many+0xf7/0x2a0\\n mmdrop+0x209/0x350\\n finish_task_switch.isra.0+0x481/0x840\\n schedule_tail+0xe/0xd0\\n ret_from_fork+0x23/0x80\\n ret_from_fork_asm+0x1a/0x30\\n \u003c/TASK\u003e\\n\\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\\ndestroy the percpu counters which init in svc_rdma_proc_init().\\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\\nleakage occurs.\\nTo solve above issue just destroy all percpu counters when\\nregister_sysctl() return NULL.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: svcrdma: se corrige la falla en la destrucci\\u00f3n de percpu_counter en svc_rdma_proc_init(). El problema es el siguiente: RPC: m\\u00f3dulo de transporte rdma registrado. RPC: m\\u00f3dulo de transporte de canal de retorno rdma registrado. RPC: m\\u00f3dulo de transporte rdma no registrado. RPC: m\\u00f3dulo de transporte de canal de retorno rdma no registrado. ERROR: no se puede gestionar el error de p\\u00e1gina para la direcci\\u00f3n: fffffbfff80c609a PGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI RIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0 Seguimiento de llamadas:  __die+0x1f/0x70 page_fault_oops+0x2cd/0x860 spurious_kernel_fault+0x36/0x450 do_kern_addr_fault+0xca/0x100 exc_page_fault+0x128/0x150 asm_exc_page_fault+0x26/0x30 percpu_counter_destroy_many+0xf7/0x2a0 mmdrop+0x209/0x350 finish_task_switch.isra.0+0x481/0x840 schedule_tail+0xe/0xd0 ret_from_fork+0x23/0x80 ret_from_fork_asm+0x1a/0x30  Si register_sysctl() devuelve NULL, entonces svc_rdma_proc_cleanup() no destruir\\u00e1 los contadores por CPU que se inicializan en svc_rdma_proc_init(). Si CONFIG_HOTPLUG_CPU est\\u00e1 habilitado, los nodos residuales pueden estar en la lista \u0027percpu_counters\u0027. El problema anterior puede ocurrir una vez que se elimina el m\\u00f3dulo. Si la configuraci\\u00f3n CONFIG_HOTPLUG_CPU no est\\u00e1 habilitada, se produce una p\\u00e9rdida de memoria. Para resolver el problema anterior, simplemente destruya todos los contadores por CPU cuando register_sysctl() devuelva NULL.\"}]",
      "id": "CVE-2024-53215",
      "lastModified": "2024-12-27T14:15:29.467",
      "published": "2024-12-27T14:15:29.467",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/1c9a99c89e45b22eb556fd2f3f729f2683f247d5\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/20322edcbad82a60321a8615a99ca73a9611115f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/94d2d6d398706ab7218a26d61e12919c4b498e09\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/a12c897adf40b6e2b4a56e6912380c31bd7b2479\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/ce89e742a4c12b20f09a43fec1b21db33f2166cd\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/ebf47215d46992caea660ec01cd618005d9e687a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "microsoft_vex": {
      "current_release_date": "2025-03-08T00:00:00.000Z",
      "cve": "CVE-2024-53215",
      "id": "msrc_CVE-2024-53215",
      "initial_release_date": "2024-12-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-53215.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53215\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-12-27T14:15:29.467\",\"lastModified\":\"2026-06-17T08:08:36.800\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\\n\\nThere\u0027s issue as follows:\\nRPC: Registered rdma transport module.\\nRPC: Registered rdma backchannel transport module.\\nRPC: Unregistered rdma transport module.\\nRPC: Unregistered rdma backchannel transport module.\\nBUG: unable to handle page fault for address: fffffbfff80c609a\\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\\nCall Trace:\\n \u003cTASK\u003e\\n __die+0x1f/0x70\\n page_fault_oops+0x2cd/0x860\\n spurious_kernel_fault+0x36/0x450\\n do_kern_addr_fault+0xca/0x100\\n exc_page_fault+0x128/0x150\\n asm_exc_page_fault+0x26/0x30\\n percpu_counter_destroy_many+0xf7/0x2a0\\n mmdrop+0x209/0x350\\n finish_task_switch.isra.0+0x481/0x840\\n schedule_tail+0xe/0xd0\\n ret_from_fork+0x23/0x80\\n ret_from_fork_asm+0x1a/0x30\\n \u003c/TASK\u003e\\n\\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\\ndestroy the percpu counters which init in svc_rdma_proc_init().\\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\\nleakage occurs.\\nTo solve above issue just destroy all percpu counters when\\nregister_sysctl() return NULL.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: svcrdma: se corrige la falla en la destrucci\u00f3n de percpu_counter en svc_rdma_proc_init(). El problema es el siguiente: RPC: m\u00f3dulo de transporte rdma registrado. RPC: m\u00f3dulo de transporte de canal de retorno rdma registrado. RPC: m\u00f3dulo de transporte rdma no registrado. RPC: m\u00f3dulo de transporte de canal de retorno rdma no registrado. ERROR: no se puede gestionar el error de p\u00e1gina para la direcci\u00f3n: fffffbfff80c609a PGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI RIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0 Seguimiento de llamadas:  __die+0x1f/0x70 page_fault_oops+0x2cd/0x860 spurious_kernel_fault+0x36/0x450 do_kern_addr_fault+0xca/0x100 exc_page_fault+0x128/0x150 asm_exc_page_fault+0x26/0x30 percpu_counter_destroy_many+0xf7/0x2a0 mmdrop+0x209/0x350 finish_task_switch.isra.0+0x481/0x840 schedule_tail+0xe/0xd0 ret_from_fork+0x23/0x80 ret_from_fork_asm+0x1a/0x30  Si register_sysctl() devuelve NULL, entonces svc_rdma_proc_cleanup() no destruir\u00e1 los contadores por CPU que se inicializan en svc_rdma_proc_init(). Si CONFIG_HOTPLUG_CPU est\u00e1 habilitado, los nodos residuales pueden estar en la lista \u0027percpu_counters\u0027. El problema anterior puede ocurrir una vez que se elimina el m\u00f3dulo. Si la configuraci\u00f3n CONFIG_HOTPLUG_CPU no est\u00e1 habilitada, se produce una p\u00e9rdida de memoria. Para resolver el problema anterior, simplemente destruya todos los contadores por CPU cuando register_sysctl() devuelva NULL.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/sunrpc/xprtrdma/svc_rdma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"a12c897adf40b6e2b4a56e6912380c31bd7b2479\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"94d2d6d398706ab7218a26d61e12919c4b498e09\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"1c9a99c89e45b22eb556fd2f3f729f2683f247d5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"ebf47215d46992caea660ec01cd618005d9e687a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"20322edcbad82a60321a8615a99ca73a9611115f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"df971cd853c05778ae1175e8aeb80a04bb9d4be5\",\"lessThan\":\"ce89e742a4c12b20f09a43fec1b21db33f2166cd\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/sunrpc/xprtrdma/svc_rdma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.12\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.12\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.174\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.120\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.64\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.11\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.2\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-10-01T20:03:29.887526Z\",\"id\":\"CVE-2024-53215\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.12\",\"versionEndExcluding\":\"5.15.174\",\"matchCriteriaId\":\"0FEB5B02-7A64-407D-ADB4-1AA8B7EFB569\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.120\",\"matchCriteriaId\":\"09AC6122-E2A4-40FE-9D33-268A1B2EC265\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.64\",\"matchCriteriaId\":\"CA16DEE3-ABEC-4449-9F4A-7A3DC4FC36C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.11\",\"matchCriteriaId\":\"21434379-192D-472F-9B54-D45E3650E893\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12\",\"versionEndExcluding\":\"6.12.2\",\"matchCriteriaId\":\"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1c9a99c89e45b22eb556fd2f3f729f2683f247d5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/20322edcbad82a60321a8615a99ca73a9611115f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/94d2d6d398706ab7218a26d61e12919c4b498e09\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a12c897adf40b6e2b4a56e6912380c31bd7b2479\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ce89e742a4c12b20f09a43fec1b21db33f2166cd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ebf47215d46992caea660ec01cd618005d9e687a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:50:38+00:00",
      "cve": "CVE-2024-53215",
      "id": "CVE-2024-53215",
      "initial_release_date": "2024-12-27T00:00:00+00:00",
      "product_status:known_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53215.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-12T23:53:45Z",
      "cve": "CVE-2024-53215",
      "id": "CVE-2024-53215",
      "initial_release_date": "2024-12-28T03:50:07Z",
      "product_status:known_affected": "431",
      "product_status:known_not_affected": "362",
      "product_status:recommended": "459",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-53215",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-53215.json",
      "version": "71"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53215\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T20:03:29.887526Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-401\", \"description\": \"CWE-401 Missing Release of Memory after Effective Lifetime\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:38:46.257Z\"}}], \"cna\": {\"title\": \"svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"a12c897adf40b6e2b4a56e6912380c31bd7b2479\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"94d2d6d398706ab7218a26d61e12919c4b498e09\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"1c9a99c89e45b22eb556fd2f3f729f2683f247d5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"ebf47215d46992caea660ec01cd618005d9e687a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"20322edcbad82a60321a8615a99ca73a9611115f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"df971cd853c05778ae1175e8aeb80a04bb9d4be5\", \"lessThan\": \"ce89e742a4c12b20f09a43fec1b21db33f2166cd\", \"versionType\": \"git\"}], \"programFiles\": [\"net/sunrpc/xprtrdma/svc_rdma.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.12\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.12\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.174\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.120\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/sunrpc/xprtrdma/svc_rdma.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/a12c897adf40b6e2b4a56e6912380c31bd7b2479\"}, {\"url\": \"https://git.kernel.org/stable/c/94d2d6d398706ab7218a26d61e12919c4b498e09\"}, {\"url\": \"https://git.kernel.org/stable/c/1c9a99c89e45b22eb556fd2f3f729f2683f247d5\"}, {\"url\": \"https://git.kernel.org/stable/c/ebf47215d46992caea660ec01cd618005d9e687a\"}, {\"url\": \"https://git.kernel.org/stable/c/20322edcbad82a60321a8615a99ca73a9611115f\"}, {\"url\": \"https://git.kernel.org/stable/c/ce89e742a4c12b20f09a43fec1b21db33f2166cd\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\\n\\nThere\u0027s issue as follows:\\nRPC: Registered rdma transport module.\\nRPC: Registered rdma backchannel transport module.\\nRPC: Unregistered rdma transport module.\\nRPC: Unregistered rdma backchannel transport module.\\nBUG: unable to handle page fault for address: fffffbfff80c609a\\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\\nCall Trace:\\n \u003cTASK\u003e\\n __die+0x1f/0x70\\n page_fault_oops+0x2cd/0x860\\n spurious_kernel_fault+0x36/0x450\\n do_kern_addr_fault+0xca/0x100\\n exc_page_fault+0x128/0x150\\n asm_exc_page_fault+0x26/0x30\\n percpu_counter_destroy_many+0xf7/0x2a0\\n mmdrop+0x209/0x350\\n finish_task_switch.isra.0+0x481/0x840\\n schedule_tail+0xe/0xd0\\n ret_from_fork+0x23/0x80\\n ret_from_fork_asm+0x1a/0x30\\n \u003c/TASK\u003e\\n\\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\\ndestroy the percpu counters which init in svc_rdma_proc_init().\\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\\nleakage occurs.\\nTo solve above issue just destroy all percpu counters when\\nregister_sysctl() return NULL.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.174\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.120\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.64\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.11\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.2\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13\", \"versionStartIncluding\": \"5.12\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:56:07.924Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53215\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-01T20:07:19.322Z\", \"dateReserved\": \"2024-11-19T17:17:25.023Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-12-27T13:50:00.688Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.