Answer in brief
CVE-2024-53187 records a Medium severity (CVSS 5.5) vulnerability in io_uring: check for overflows in io_pin_pages. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 5.1 | Not reported |
| Linux/Linuxgeneric | >=2b188cc1bb857a9d4701ae59aa7768b5124e262e <1a0aecabff72a95d240e6d7645949bfe0620dcd7 || >=2b188cc1bb857a9d4701ae59aa7768b5124e262e <29eac3eca72d4c2a71122050c37cd7d8f73ac4f3 || >=2b188cc1bb857a9d4701ae59aa7768b5124e262e <aaa90844afd499c9142d0199dfda74439314c013 || >=2b188cc1bb857a9d4701ae59aa7768b5124e262e <0c0a4eae26ac78379d0c1db053de168a8febc6c9 | 1a0aecabff72a95d240e6d7645949bfe0620dcd7, 29eac3eca72d4c2a71122050c37cd7d8f73ac4f3, aaa90844afd499c9142d0199dfda74439314c013, 0c0a4eae26ac78379d0c1db053de168a8febc6c9 |
Published upstream
Dec 27, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 21, 2026
In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144 CPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0 Call Trace: <TASK> __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183 io_rings_map io_uring/io_uring.c:2611 [inline] io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470 io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692 io_uring_setup io_uring/io_uring.c:3781 [inline] ... </TASK> io_pin_pages()'s uaddr parameter came directly from the user and can be garbage. Don't just add size to it as it can overflow.
Quoted source text, attributed separately from HOL analysis.