{"vulnerability": "cve-2024-5312", "sightings": [{"uuid": "4eb1f28c-7523-4ec4-beb5-de8d8eb0b97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53122", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113584320467676738", "content": "", "creation_timestamp": "2024-12-02T17:06:27.846165Z"}, {"uuid": "10193d8c-2423-4e84-89b1-e8a2a12ef33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53125", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113594971054570634", "content": "", "creation_timestamp": "2024-12-04T14:15:02.376376Z"}, {"uuid": "2991a16a-4c3b-412c-baf8-c80d2081818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53128", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595022620151406", "content": "", "creation_timestamp": "2024-12-04T14:28:09.937348Z"}, {"uuid": "5e882eb3-bdf6-45c5-93d6-894a8b9c4285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53126", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113595273905511216", "content": "", "creation_timestamp": "2024-12-04T15:32:04.004575Z"}, {"uuid": "2a5ea948-3e43-4ede-aeba-d1048e290e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53121", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113584261467775939", "content": "", "creation_timestamp": "2024-12-02T16:51:27.131384Z"}, {"uuid": "5e5a463f-9a7f-40f5-afa1-3d7afe2471be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53129", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595022655819068", "content": "", "creation_timestamp": "2024-12-04T14:28:09.999455Z"}, {"uuid": "9b3c3695-5102-43f1-af1d-a62a27117465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53124", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113584320495577648", "content": "", "creation_timestamp": "2024-12-02T17:06:27.978539Z"}, {"uuid": "a1192be3-b8b7-4a06-92ad-69f13ce504f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53123", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113584320481604222", "content": "", "creation_timestamp": "2024-12-02T17:06:27.908942Z"}, {"uuid": "c85bfd14-228e-43ab-9cd1-5af1dbae94bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53127", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595022605106808", "content": "", "creation_timestamp": "2024-12-04T14:28:09.334886Z"}, {"uuid": "eb46ad0e-bd54-4495-84e2-bc52a3a073c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53126", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595022590553741", "content": "", "creation_timestamp": "2024-12-04T14:28:09.040273Z"}, {"uuid": "a7fdfbb3-b502-4388-8af0-2646dbcb48b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53120", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113584261453399930", "content": "", "creation_timestamp": "2024-12-02T16:51:27.006349Z"}, {"uuid": "df27f59b-3f8b-404e-81cf-e0c88fbb6d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53124", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m4ykota5wc2j", "content": "", "creation_timestamp": "2025-11-06T21:58:21.492456Z"}, {"uuid": "efa1a7af-200d-426e-8d8d-34196370d143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-53128", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "abb207cd-f170-4bcd-acb8-7ea1ebe6c8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53128", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-53128\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsched/task_stack: fix object_is_on_stack() for KASAN tagged pointers\n\nWhen CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, the\nobject_is_on_stack() function may produce incorrect results due to the\npresence of tags in the obj pointer, while the stack pointer does not have\ntags.  This discrepancy can lead to incorrect stack object detection and\nsubsequently trigger warnings if CONFIG_DEBUG_OBJECTS is also enabled.\n\nExample of the warning:\n\nODEBUG: object 3eff800082ea7bb0 is NOT on stack ffff800082ea0000, but annotated.\n------------[ cut here ]------------\nWARNING: CPU: 0 PID: 1 at lib/debugobjects.c:557 __debug_object_init+0x330/0x364\nModules linked in:\nCPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.0-rc5 #4\nHardware name: linux,dummy-virt (DT)\npstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __debug_object_init+0x330/0x364\nlr : __debug_object_init+0x330/0x364\nsp : ffff800082ea7b40\nx29: ffff800082ea7b40 x28: 98ff0000c0164518 x27: 98ff0000c0164534\nx26: ffff800082d93ec8 x25: 0000000000000001 x24: 1cff0000c00172a0\nx23: 0000000000000000 x22: ffff800082d93ed0 x21: ffff800081a24418\nx20: 3eff800082ea7bb0 x19: efff800000000000 x18: 0000000000000000\nx17: 00000000000000ff x16: 0000000000000047 x15: 206b63617473206e\nx14: 0000000000000018 x13: ffff800082ea7780 x12: 0ffff800082ea78e\nx11: 0ffff800082ea790 x10: 0ffff800082ea79d x9 : 34d77febe173e800\nx8 : 34d77febe173e800 x7 : 0000000000000001 x6 : 0000000000000001\nx5 : feff800082ea74b8 x4 : ffff800082870a90 x3 : ffff80008018d3c4\nx2 : 0000000000000001 x1 : ffff800082858810 x0 : 0000000000000050\nCall trace:\n __debug_object_init+0x330/0x364\n debug_object_init_on_stack+0x30/0x3c\n schedule_hrtimeout_range_clock+0xac/0x26c\n schedule_hrtimeout+0x1c/0x30\n wait_task_inactive+0x1d4/0x25c\n kthread_bind_mask+0x28/0x98\n init_rescuer+0x1e8/0x280\n workqueue_init+0x1a0/0x3cc\n kernel_init_freeable+0x118/0x200\n kernel_init+0x28/0x1f0\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nODEBUG: object 3eff800082ea7bb0 is NOT on stack ffff800082ea0000, but annotated.\n------------[ cut here ]------------\n\ud83d\udccf Published: 2024-12-04T14:20:34.985Z\n\ud83d\udccf Modified: 2025-01-17T13:27:01.390Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/397383db9c69470642ac95beb04f2150928d663b\n2. https://git.kernel.org/stable/c/2d2b19ed4169c38dc6c61a186c5f7bdafc709691\n3. https://git.kernel.org/stable/c/fbfe23012cec509dfbe09852019c4e4bb84999d0\n4. https://git.kernel.org/stable/c/fd7b4f9f46d46acbc7af3a439bb0d869efdc5c58", "creation_timestamp": "2025-01-17T13:56:46.000000Z"}, {"uuid": "8715a782-21df-407c-b31d-d8d0108bfa83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53126", "type": "seen", "source": "https://t.me/cvedetector/12005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53126 - Solidrun VDPA Undefined Behavior Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-53126 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvdpa: solidrun: Fix UB bug with devres  \n  \nIn psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to  \npcim_iomap_regions() is placed on the stack. Neither  \npcim_iomap_regions() nor the functions it calls copy that string.  \n  \nShould the string later ever be used, this, consequently, causes  \nundefined behavior since the stack frame will by then have disappeared.  \n  \nFix the bug by allocating the strings on the heap through  \ndevm_kasprintf(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:41.000000Z"}, {"uuid": "4beed9bf-f493-4af1-b6ab-f3a7735000ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53129", "type": "seen", "source": "https://t.me/cvedetector/12003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53129 - Rockchip DRM Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-53129 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/rockchip: vop: Fix a dereferenced before check warning  \n  \nThe 'state' can't be NULL, we should check crtc_state.  \n  \nFix warning:  \ndrivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096  \nvop_plane_atomic_async_check() warn: variable dereferenced before check  \n'state' (see line 1077) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:39.000000Z"}, {"uuid": "8030fd65-b995-4915-bd09-232489a323d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53127", "type": "seen", "source": "https://t.me/cvedetector/12002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53127 - Linux kernel MMC dw_mmc Kernel Panic Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-53127 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"  \n  \nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages  \nbigger than 4K\") increased the max_req_size, even for 4K pages, causing  \nvarious issues:  \n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566  \n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100  \n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110  \n  \nAt this stage no fix have been found, so it's probably better to just  \nrevert the change.  \n  \nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:38.000000Z"}, {"uuid": "95b94e2f-24f2-447f-bb0c-8d4f3b478e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53128", "type": "seen", "source": "https://t.me/cvedetector/12006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53128 - Linux Kernel KASAN SW TAGS Object Detection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-53128 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsched/task_stack: fix object_is_on_stack() for KASAN tagged pointers  \n  \nWhen CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, the  \nobject_is_on_stack() function may produce incorrect results due to the  \npresence of tags in the obj pointer, while the stack pointer does not have  \ntags.  This discrepancy can lead to incorrect stack object detection and  \nsubsequently trigger warnings if CONFIG_DEBUG_OBJECTS is also enabled.  \n  \nExample of the warning:  \n  \nODEBUG: object 3eff800082ea7bb0 is NOT on stack ffff800082ea0000, but annotated.  \n------------[ cut here ]------------  \nWARNING: CPU: 0 PID: 1 at lib/debugobjects.c:557 __debug_object_init+0x330/0x364  \nModules linked in:  \nCPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.0-rc5 #4  \nHardware name: linux,dummy-virt (DT)  \npstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \npc : __debug_object_init+0x330/0x364  \nlr : __debug_object_init+0x330/0x364  \nsp : ffff800082ea7b40  \nx29: ffff800082ea7b40 x28: 98ff0000c0164518 x27: 98ff0000c0164534  \nx26: ffff800082d93ec8 x25: 0000000000000001 x24: 1cff0000c00172a0  \nx23: 0000000000000000 x22: ffff800082d93ed0 x21: ffff800081a24418  \nx20: 3eff800082ea7bb0 x19: efff800000000000 x18: 0000000000000000  \nx17: 00000000000000ff x16: 0000000000000047 x15: 206b63617473206e  \nx14: 0000000000000018 x13: ffff800082ea7780 x12: 0ffff800082ea78e  \nx11: 0ffff800082ea790 x10: 0ffff800082ea79d x9 : 34d77febe173e800  \nx8 : 34d77febe173e800 x7 : 0000000000000001 x6 : 0000000000000001  \nx5 : feff800082ea74b8 x4 : ffff800082870a90 x3 : ffff80008018d3c4  \nx2 : 0000000000000001 x1 : ffff800082858810 x0 : 0000000000000050  \nCall trace:  \n __debug_object_init+0x330/0x364  \n debug_object_init_on_stack+0x30/0x3c  \n schedule_hrtimeout_range_clock+0xac/0x26c  \n schedule_hrtimeout+0x1c/0x30  \n wait_task_inactive+0x1d4/0x25c  \n kthread_bind_mask+0x28/0x98  \n init_rescuer+0x1e8/0x280  \n workqueue_init+0x1a0/0x3cc  \n kernel_init_freeable+0x118/0x200  \n kernel_init+0x28/0x1f0  \n ret_from_fork+0x10/0x20  \n---[ end trace 0000000000000000 ]---  \nODEBUG: object 3eff800082ea7bb0 is NOT on stack ffff800082ea0000, but annotated.  \n------------[ cut here ]------------ \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:41.000000Z"}, {"uuid": "d7010fb9-5828-4e5c-94f4-04317ac1204a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53125", "type": "seen", "source": "https://t.me/cvedetector/11989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53125 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-53125 \nPublished : Dec. 4, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: sync_linked_regs() must preserve subreg_def  \n  \nRange propagation must not affect subreg_def marks, otherwise the  \nfollowing example is rewritten by verifier incorrectly when  \nBPF_F_TEST_RND_HI32 flag is set:  \n  \n  0: call bpf_ktime_get_ns                   call bpf_ktime_get_ns  \n  1: r0 &= 0x7fffffff       after verifier   r0 &= 0x7fffffff  \n  2: w1 = w0                rewrites         w1 = w0  \n  3: if w0 < 10 goto +0     -------------->  r11 = 0x2f5674a6     (r)  \n  4: r1 >>= 32                               r11 <=>= 32  \n                                             r0 = r1  \n                                             exit  \n  \n(or zero extension of w1 at (2) is missing for architectures that  \n require zero extension for upper register half).  \n  \nThe following happens w/o this patch:  \n- r0 is marked as not a subreg at (0);  \n- w1 is marked as subreg at (2);  \n- w1 subreg_def is overridden at (3) by copy_register_state();  \n- w1 is read at (5) but mark_insn_zext() does not mark (2)  \n  for zero extension, because w1 subreg_def is not set;  \n- because of BPF_F_TEST_RND_HI32 flag verifier inserts random  \n  value for hi32 bits of (2) (marked (r));  \n- this random value is read at (5). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T15:55:03.000000Z"}]}