Answer in brief
CVE-2024-53109 records a Unknown severity vulnerability in nommu: pass NULL argument to vma_iter_prealloc(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b5df09226450165c434084d346fcb6d4858b0d52 <8bbf0ab631cdf1dade6745f137cff98751e6ced7 || >=b5df09226450165c434084d346fcb6d4858b0d52 <aceaf33b7666b72dfb86e0aa977be81e3bcbc727 || >=b5df09226450165c434084d346fcb6d4858b0d52 <247d720b2c5d22f7281437fd6054a138256986ba | 8bbf0ab631cdf1dade6745f137cff98751e6ced7, aceaf33b7666b72dfb86e0aa977be81e3bcbc727, 247d720b2c5d22f7281437fd6054a138256986ba |
| Linux/Linuxgeneric | 6.6 | Not reported |
Published upstream
Dec 2, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels crashed upon accessing a vma iterator, such as acct_collect() reading the size of vma entries after do_munmap(). This commit fixes this issue by passing a right argument to the preallocation call.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2024-53109 records a Unknown severity vulnerability in nommu: pass NULL argument to vma_iter_prealloc(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b5df09226450165c434084d346fcb6d4858b0d52 <8bbf0ab631cdf1dade6745f137cff98751e6ced7 || >=b5df09226450165c434084d346fcb6d4858b0d52 <aceaf33b7666b72dfb86e0aa977be81e3bcbc727 || >=b5df09226450165c434084d346fcb6d4858b0d52 <247d720b2c5d22f7281437fd6054a138256986ba | 8bbf0ab631cdf1dade6745f137cff98751e6ced7, aceaf33b7666b72dfb86e0aa977be81e3bcbc727, 247d720b2c5d22f7281437fd6054a138256986ba |
| Linux/Linuxgeneric | 6.6 | Not reported |
Published upstream
Dec 2, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels crashed upon accessing a vma iterator, such as acct_collect() reading the size of vma entries after do_munmap(). This commit fixes this issue by passing a right argument to the preallocation call.
Quoted source text, attributed separately from HOL analysis.