GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-57945 (GCVE-0-2024-57945)

Vulnerability from cvelistv5 – Published: 2025-01-21 12:18 – Updated: 2026-08-05 11:47
VLAI
Title
riscv: mm: Fix the out of bound issue of vmemmap address
Summary
In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: ((struct page *)VMEMMAP_START - (phys_ram_base >> PAGE_SHIFT)). And the struct page's va can be calculated with an offset: (vmemmap + (pfn)). However, when initializing struct pages, kernel actually starts from the first page from the same section that phys_ram_base belongs to. If the first page's physical address is not (phys_ram_base >> PAGE_SHIFT), then we get an va below VMEMMAP_START when calculating va for it's struct page. For example, if phys_ram_base starts from 0x82000000 with pfn 0x82000, the first page in the same section is actually pfn 0x80000. During init_unavailable_range(), we will initialize struct page for pfn 0x80000 with virtual address ((struct page *)VMEMMAP_START - 0x2000), which is below VMEMMAP_START as well as PCI_IO_END. This commit fixes this bug by introducing a new variable 'vmemmap_start_pfn' which is aligned with memory section size and using it to calculate vmemmap address instead of phys_ram_base.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 8af1c121b0102041809bc137ec600d1865eaeedd , < 04350304428063da6a55a8a4597d409dc69148b2 (git)
Affected: 8310080799b40fd9f2a8b808c657269678c149af , < 92f08673d3f1893191323572f60e3c62f2e57c2f (git)
Affected: a278d5c60f21aa15d540abb2f2da6e6d795c3e6e , < a4a7ac3d266008018f05fae53060fcb331151a14 (git)
Affected: a11dd49dcb9376776193e15641f84fcc1e5980c9 , < d2bd51954ac8377c2f1eb1813e694788998add66 (git)
Affected: a11dd49dcb9376776193e15641f84fcc1e5980c9 , < f754f27e98f88428aaf6be6e00f5cbce97f62d4b (git)
Affected: 5941a90c55d3bfba732b32208d58d997600b44ef (git)
Affected: 2a1728c15ec4f45ed9248ae22f626541c179bfbe (git)
Affected: 5.10.212 , < 5.10.258 (semver)
Affected: 6.1.81 , < 6.1.140 (semver)
Affected: 6.6.21 , < 6.6.72 (semver)
Affected: 5.15.151 , < 5.16 (semver)
Affected: 6.7.9 , < 6.8 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.8
Unaffected: 0 , < 6.8 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 6.1.140 , ≤ 6.1.* (semver)
Unaffected: 6.6.72 , ≤ 6.6.* (semver)
Unaffected: 6.12.10 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:32:46.584Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/include/asm/page.h",
            "arch/riscv/include/asm/pgtable.h",
            "arch/riscv/mm/init.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "04350304428063da6a55a8a4597d409dc69148b2",
              "status": "affected",
              "version": "8af1c121b0102041809bc137ec600d1865eaeedd",
              "versionType": "git"
            },
            {
              "lessThan": "92f08673d3f1893191323572f60e3c62f2e57c2f",
              "status": "affected",
              "version": "8310080799b40fd9f2a8b808c657269678c149af",
              "versionType": "git"
            },
            {
              "lessThan": "a4a7ac3d266008018f05fae53060fcb331151a14",
              "status": "affected",
              "version": "a278d5c60f21aa15d540abb2f2da6e6d795c3e6e",
              "versionType": "git"
            },
            {
              "lessThan": "d2bd51954ac8377c2f1eb1813e694788998add66",
              "status": "affected",
              "version": "a11dd49dcb9376776193e15641f84fcc1e5980c9",
              "versionType": "git"
            },
            {
              "lessThan": "f754f27e98f88428aaf6be6e00f5cbce97f62d4b",
              "status": "affected",
              "version": "a11dd49dcb9376776193e15641f84fcc1e5980c9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5941a90c55d3bfba732b32208d58d997600b44ef",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2a1728c15ec4f45ed9248ae22f626541c179bfbe",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.258",
              "status": "affected",
              "version": "5.10.212",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.140",
              "status": "affected",
              "version": "6.1.81",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.72",
              "status": "affected",
              "version": "6.6.21",
              "versionType": "semver"
            },
            {
              "lessThan": "5.16",
              "status": "affected",
              "version": "5.15.151",
              "versionType": "semver"
            },
            {
              "lessThan": "6.8",
              "status": "affected",
              "version": "6.7.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/include/asm/page.h",
            "arch/riscv/include/asm/pgtable.h",
            "arch/riscv/mm/init.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.72",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "5.10.212",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.140",
                  "versionStartIncluding": "6.1.81",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.72",
                  "versionStartIncluding": "6.6.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.10",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.15.151",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.7.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: mm: Fix the out of bound issue of vmemmap address\n\nIn sparse vmemmap model, the virtual address of vmemmap is calculated as:\n((struct page *)VMEMMAP_START - (phys_ram_base \u003e\u003e PAGE_SHIFT)).\nAnd the struct page\u0027s va can be calculated with an offset:\n(vmemmap + (pfn)).\n\nHowever, when initializing struct pages, kernel actually starts from the\nfirst page from the same section that phys_ram_base belongs to. If the\nfirst page\u0027s physical address is not (phys_ram_base \u003e\u003e PAGE_SHIFT), then\nwe get an va below VMEMMAP_START when calculating va for it\u0027s struct page.\n\nFor example, if phys_ram_base starts from 0x82000000 with pfn 0x82000, the\nfirst page in the same section is actually pfn 0x80000. During\ninit_unavailable_range(), we will initialize struct page for pfn 0x80000\nwith virtual address ((struct page *)VMEMMAP_START - 0x2000), which is\nbelow VMEMMAP_START as well as PCI_IO_END.\n\nThis commit fixes this bug by introducing a new variable\n\u0027vmemmap_start_pfn\u0027 which is aligned with memory section size and using\nit to calculate vmemmap address instead of phys_ram_base."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The defect is in RISC-V early boot memory management (`setup_bootmem()`/`sparse_init()`/`init_unavailable_range()`), reachable only through operation of the local system; no network, adjacent-network, or remote-peer data path exists to arch/riscv/mm/init.c. Local is scored over Physical because the corrupted state is present on every boot of an affected board without any physical device interaction.\nAC:L - On an affected system (DRAM base not aligned to the 128 MB `SECTION_SIZE_BITS==27` boundary, e.g. 0x82000000), the out-of-bounds PMD mapping and the struct page writes into the PCI I/O window occur deterministically on every single boot \u2014 there is no race, no memory-layout lottery, and no timing window to win.\nPR:L - The flawed mapping is created during boot with no privileges involved at all, and any local unprivileged user then runs on a system whose PCI I/O virtual window is already aliased onto the struct page array; no authentication, capability, or namespace gate protects the resulting state.\nUI:N - No victim action of any kind is required \u2014 the out-of-bounds vmemmap base is computed and the struct pages are written by `sparse_init()`/`free_area_init()` before userspace exists.\nS:U - The out-of-bounds writes, the aliased PCI I/O mappings, and the resulting panic are all inside the kernel\u0027s own security authority; no VM, IOMMU/DMA, or sandbox boundary is crossed.\nC:H - Kernel struct page data (page flags, node/zone identifiers, and mapping/lru pointers containing kernel addresses) is written into the PCI I/O port VA window, so I/O port reads in that range return kernel memory contents, and the reverse aliasing makes device register values readable as page metadata \u2014 an unbounded out-of-bounds read/disclosure primitive across ~2 MB.\nI:H - This is a genuine out-of-bounds write: up to 2 MB of struct page state is written below `VMEMMAP_START` into the PCI I/O region, and where a PCI I/O mapping wins the overlap, subsequent kernel writes to those `struct page` fields become writes to device registers while page metadata itself is corrupted with device-supplied values.\nA:H - If a host bridge\u0027s I/O resource overlaps the stolen top 2 MB, `pci_remap_iospace()` \u2192 `vmap_pte_range()` hits the `BUG()` on the already-populated PTE, panicking the kernel during PCI probe; corrupted page metadata from aliased MMIO reads likewise oopses the page allocator."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:47:00.906Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/04350304428063da6a55a8a4597d409dc69148b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/92f08673d3f1893191323572f60e3c62f2e57c2f"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4a7ac3d266008018f05fae53060fcb331151a14"
        },
        {
          "url": "https://git.kernel.org/stable/c/d2bd51954ac8377c2f1eb1813e694788998add66"
        },
        {
          "url": "https://git.kernel.org/stable/c/f754f27e98f88428aaf6be6e00f5cbce97f62d4b"
        }
      ],
      "title": "riscv: mm: Fix the out of bound issue of vmemmap address",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-57945",
    "datePublished": "2025-01-21T12:18:12.548Z",
    "dateReserved": "2025-01-19T11:50:08.380Z",
    "dateUpdated": "2026-08-05T11:47:00.906Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-57945",
      "date": "2026-09-16",
      "epss": "0.00212",
      "percentile": "0.1164"
    },
    "microsoft_vex": {
      "current_release_date": "2026-03-31T15:14:46.000Z",
      "cve": "CVE-2024-57945",
      "id": "msrc_CVE-2024-57945",
      "initial_release_date": "2025-01-02T00:00:00.000Z",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "riscv: mm: Fix the out of bound issue of vmemmap address",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2024-57945.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-57945\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-21T13:15:09.033\",\"lastModified\":\"2026-08-04T11:22:32.510\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nriscv: mm: Fix the out of bound issue of vmemmap address\\n\\nIn sparse vmemmap model, the virtual address of vmemmap is calculated as:\\n((struct page *)VMEMMAP_START - (phys_ram_base \u003e\u003e PAGE_SHIFT)).\\nAnd the struct page\u0027s va can be calculated with an offset:\\n(vmemmap + (pfn)).\\n\\nHowever, when initializing struct pages, kernel actually starts from the\\nfirst page from the same section that phys_ram_base belongs to. If the\\nfirst page\u0027s physical address is not (phys_ram_base \u003e\u003e PAGE_SHIFT), then\\nwe get an va below VMEMMAP_START when calculating va for it\u0027s struct page.\\n\\nFor example, if phys_ram_base starts from 0x82000000 with pfn 0x82000, the\\nfirst page in the same section is actually pfn 0x80000. During\\ninit_unavailable_range(), we will initialize struct page for pfn 0x80000\\nwith virtual address ((struct page *)VMEMMAP_START - 0x2000), which is\\nbelow VMEMMAP_START as well as PCI_IO_END.\\n\\nThis commit fixes this bug by introducing a new variable\\n\u0027vmemmap_start_pfn\u0027 which is aligned with memory section size and using\\nit to calculate vmemmap address instead of phys_ram_base.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: riscv: mm: Corrige el problema de salida de l\u00edmites de la direcci\u00f3n vmemmap En el modelo vmemmap disperso, la direcci\u00f3n virtual de vmemmap se calcula como: ((struct page *)VMEMMAP_START - (phys_ram_base \u0026gt;\u0026gt; PAGE_SHIFT)). Y la va de la p\u00e1gina de estructura se puede calcular con un desplazamiento: (vmemmap + (pfn)). Sin embargo, al inicializar las p\u00e1ginas de estructura, el kernel en realidad comienza desde la primera p\u00e1gina de la misma secci\u00f3n a la que pertenece phys_ram_base. Si la direcci\u00f3n f\u00edsica de la primera p\u00e1gina no es (phys_ram_base \u0026gt;\u0026gt; PAGE_SHIFT), obtenemos una va por debajo de VMEMMAP_START al calcular la va para su p\u00e1gina de estructura. Por ejemplo, si phys_ram_base comienza desde 0x82000000 con pfn 0x82000, la primera p\u00e1gina en la misma secci\u00f3n es en realidad pfn 0x80000. Durante init_unavailable_range(), inicializaremos struct page para pfn 0x80000 con direcci\u00f3n virtual ((struct page *)VMEMMAP_START - 0x2000), que est\u00e1 debajo de VMEMMAP_START y PCI_IO_END. Esta confirmaci\u00f3n corrige este error al introducir una nueva variable \u0027vmemmap_start_pfn\u0027 que est\u00e1 alineada con el tama\u00f1o de la secci\u00f3n de memoria y la usa para calcular la direcci\u00f3n vmemmap en lugar de phys_ram_base.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/riscv/include/asm/page.h\",\"arch/riscv/include/asm/pgtable.h\",\"arch/riscv/mm/init.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"8af1c121b0102041809bc137ec600d1865eaeedd\",\"lessThan\":\"04350304428063da6a55a8a4597d409dc69148b2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8310080799b40fd9f2a8b808c657269678c149af\",\"lessThan\":\"92f08673d3f1893191323572f60e3c62f2e57c2f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a278d5c60f21aa15d540abb2f2da6e6d795c3e6e\",\"lessThan\":\"a4a7ac3d266008018f05fae53060fcb331151a14\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a11dd49dcb9376776193e15641f84fcc1e5980c9\",\"lessThan\":\"d2bd51954ac8377c2f1eb1813e694788998add66\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a11dd49dcb9376776193e15641f84fcc1e5980c9\",\"lessThan\":\"f754f27e98f88428aaf6be6e00f5cbce97f62d4b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5941a90c55d3bfba732b32208d58d997600b44ef\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2a1728c15ec4f45ed9248ae22f626541c179bfbe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.212\",\"lessThan\":\"5.10.258\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.81\",\"lessThan\":\"6.1.140\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.21\",\"lessThan\":\"6.6.72\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.151\",\"lessThan\":\"5.16\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.7.9\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"arch/riscv/include/asm/page.h\",\"arch/riscv/include/asm/pgtable.h\",\"arch/riscv/mm/init.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.140\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.72\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.10\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.212\",\"versionEndExcluding\":\"5.11\",\"matchCriteriaId\":\"F1E6B58E-F7D7-480E-A09B-0FA874293160\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.151\",\"versionEndExcluding\":\"5.16\",\"matchCriteriaId\":\"DF37B912-2F16-4C92-A527-CD2B342631D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.81\",\"versionEndExcluding\":\"6.1.140\",\"matchCriteriaId\":\"41B78C99-AE93-456C-9689-C4B567C67F85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.21\",\"versionEndExcluding\":\"6.6.72\",\"matchCriteriaId\":\"7537BD1C-63FF-4CA8-B2A1-151A8D1AA8E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7.9\",\"versionEndExcluding\":\"6.8\",\"matchCriteriaId\":\"739125EE-99C1-42E1-B870-04FD5010BA66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8.1\",\"versionEndExcluding\":\"6.12.10\",\"matchCriteriaId\":\"B62FEA87-2A2A-4A33-A535-AEE5670C4FB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"41E47F32-BA80-4333-96FD-4D25082B0FDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9B8A5CE-6D20-4C36-AC01-ACA4B70003A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"62567B3C-6CEE-46D0-BC2E-B3717FBF7D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A073481-106D-4B15-B4C7-FB0213B8E1D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE491969-75AE-4A6B-9A58-8FC5AF98798F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"93C0660D-7FB8-4FBA-892A-B064BA71E49E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"034C36A6-C481-41F3-AE9A-D116E5BE6895\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/04350304428063da6a55a8a4597d409dc69148b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/92f08673d3f1893191323572f60e3c62f2e57c2f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a4a7ac3d266008018f05fae53060fcb331151a14\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d2bd51954ac8377c2f1eb1813e694788998add66\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f754f27e98f88428aaf6be6e00f5cbce97f62d4b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2025-11-25T10:25:26+00:00",
      "cve": "CVE-2024-57945",
      "id": "CVE-2024-57945",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "276",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: riscv: mm: Fix the out of bound issue of vmemmap address",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-57945.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T01:35:16Z",
      "cve": "CVE-2024-57945",
      "id": "CVE-2024-57945",
      "initial_release_date": "2025-01-22T03:48:47Z",
      "product_status:known_not_affected": "564",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-57945",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-57945.json",
      "version": "17"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.