Skip to content
Fencer Intel
medium 5.5

CVE-2024-53064 json

idpf: fix idpf_vc_core_init error path

published last yr. modified 4mo ago also EUVD-2024-50480

cvss
5.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 10%
public exploits
0
none known

Summary

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix idpf_vc_core_init error path

In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.

In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.

Patch / fix

  • Linux Linux 6.11.8, 6.12
  • linux Debian 14, Debian 13 6.11.9-1

debian advisories DEBIAN-CVE-2024-53064

  • linux-gcp Ubuntu 22.04 LTS 5.15.0-1078.87
  • linux-gcp Ubuntu 24.04 LTS 6.8.0-1025.27
  • linux-gke Ubuntu 22.04 LTS 5.15.0-1076.82
  • linux-gke Ubuntu 24.04 LTS 6.8.0-1020.24
  • linux-gkeop Ubuntu 24.04 LTS 6.8.0-1007.9
  • linux-gcp-6.8 Ubuntu 22.04 LTS 6.8.0-1025.27~22.04.1
  • linux-gcp-5.15 Ubuntu 20.04 LTS 5.15.0-1078.87~20.04.1
  • linux-gcp-6.11 Ubuntu 24.04 LTS 6.11.0-1011.11~24.04.1

ubuntu advisories UBUNTU-CVE-2024-53064

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel-rt RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-kvm RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-core RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-modules RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-debug-kvm RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-debug-core RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-debug-modules RHEL 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel-rt-modules-extra RHEL 8 4.18.0-553.58.1.rt7.399.el8_10

red hat advisories RHSA-2025:9581RHSA-2025:9580

  • kernel-64kb SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS, SLE High Performance Computing 15 SP4-ESPOS 5.14.21-150400.24.161.1
  • kernel-syms SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +3 more 5.14.21-150400.24.161.1
  • kernel-source SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +3 more 5.14.21-150400.24.161.1
  • kernel-default SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Micro 5.4 +7 more 5.14.21-150400.24.161.1
  • kernel-zfcpdump SLES 15 SP4-LTSS, Manager Server 4.3 5.14.21-150400.24.161.1
  • kernel-obs-build SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +1 more 5.14.21-150400.24.161.1
  • kernel-default-base SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Micro 5.4 +5 more 5.14.21-150400.24.161.1.150400.24.80.1
  • kernel-rt SLE Micro 5.4, SLE Micro 5.3 5.14.21-150400.15.115.1

suse advisories SUSE-SU-2025:1195-1SUSE-SU-2025:1183-1SUSE-SU-2025:20166-1SUSE-SU-2025:20249-1SUSE-SU-2025:20165-1SUSE-SU-2025:20248-1

  • kernel AlmaLinux 8 4.18.0-553.58.1.el8_10
  • perf AlmaLinux 8 4.18.0-553.58.1.el8_10
  • bpftool AlmaLinux 8 4.18.0-553.58.1.el8_10
  • kernel-core AlmaLinux 8 4.18.0-553.58.1.el8_10
  • kernel-tools AlmaLinux 8 4.18.0-553.58.1.el8_10
  • python3-perf AlmaLinux 8 4.18.0-553.58.1.el8_10
  • kernel-modules AlmaLinux 8 4.18.0-553.58.1.el8_10
  • kernel-zfcpdump AlmaLinux 8 4.18.0-553.58.1.el8_10

almalinux advisories ALSA-2025:9580ALSA-2025:9581

  • kernel-rt Rocky Linux 8 4.18.0-553.58.1.rt7.399.el8_10
  • kernel Rocky Linux 8 4.18.0-553.58.1.el8_10

rocky linux advisories RLSA-2025:9581RLSA-2025:9580

Is CVE-2024-53064 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-53064 updated cvss 4.4

kernel: idpf: fix idpf_vc_core_init error path

  • Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +82 more
    affected: no fix available
  • Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-553.58.1.el8_10, kernel 4.18.0-553.58.1.el8_10, bpftool 4.18.0-553.58.1.el8_10, kernel-core 4.18.0-553.58.1.el8_10, kernel-tools 4.18.0-553.58.1.el8_10, python3-perf 4.18.0-553.58.1.el8_10, +15 more Red Hat Enterprise Linux CRB (v. 8) kernel-debuginfo-common-x86_64 4.18.0-553.58.1.el8_10, kernel-debuginfo-common-aarch64 4.18.0-553.58.1.el8_10, kernel-debuginfo-common-ppc64le 4.18.0-553.58.1.el8_10
    fixed: vendor fix RHSA-2025:9580
  • Red Hat Enterprise Linux NFV (v. 8) kernel-rt 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-kvm 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-core 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-modules 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-debug-kvm 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-debug-core 4.18.0-553.58.1.rt7.399.el8_10, +4 more Red Hat Enterprise Linux RT (v. 8) kernel-rt 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-core 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-modules 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-debug-core 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-debug-modules 4.18.0-553.58.1.rt7.399.el8_10, kernel-rt-modules-extra 4.18.0-553.58.1.rt7.399.el8_10, +2 more
    fixed: vendor fix RHSA-2025:9581
  • Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
last yr.

Exploit prediction

0.20% chance of exploitation in the next 30 days, higher than 10% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Linux Linux

Classification

Weakness
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.