GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-53210 (GCVE-0-2024-53210)

Vulnerability from cvelistv5 – Published: 2024-12-27 13:49 – Updated: 2026-05-11 20:52
VLAI
Title
s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() Passing MSG_PEEK flag to skb_recv_datagram() increments skb refcount (skb->users) and iucv_sock_recvmsg() does not decrement skb refcount at exit. This results in skb memory leak in skb_queue_purge() and WARN_ON in iucv_sock_destruct() during socket close. To fix this decrease skb refcount by one if MSG_PEEK is set in order to prevent memory leak and WARN_ON. WARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv] CPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1 Hardware name: IBM 3931 A01 704 (z/VM 7.3.0) Call Trace: [<001587c682c4aa98>] iucv_sock_destruct+0x148/0x1a0 [af_iucv] [<001587c682c4a9d0>] iucv_sock_destruct+0x80/0x1a0 [af_iucv] [<001587c704117a32>] __sk_destruct+0x52/0x550 [<001587c704104a54>] __sock_release+0xa4/0x230 [<001587c704104c0c>] sock_close+0x2c/0x40 [<001587c702c5f5a8>] __fput+0x2e8/0x970 [<001587c7024148c4>] task_work_run+0x1c4/0x2c0 [<001587c7023b0716>] do_exit+0x996/0x1050 [<001587c7023b13aa>] do_group_exit+0x13a/0x360 [<001587c7023b1626>] __s390x_sys_exit_group+0x56/0x60 [<001587c7022bccca>] do_syscall+0x27a/0x380 [<001587c7049a6a0c>] __do_syscall+0x9c/0x160 [<001587c7049ce8a8>] system_call+0x70/0x98 Last Breaking-Event-Address: [<001587c682c4a9d4>] iucv_sock_destruct+0x84/0x1a0 [af_iucv]
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 20:03 UTC
CWE
  • CWE-401 - Missing Release of Memory after Effective Lifetime
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: eac3731bd04c7131478722a3c148b78774553116 , < 934326aef7ac4652f81c69d18bf44eebaefc39c3 (git)
Affected: eac3731bd04c7131478722a3c148b78774553116 , < 42251c2d1ef1cb0822638bebb87ad9120c759673 (git)
Affected: eac3731bd04c7131478722a3c148b78774553116 , < 783c2c6e61c5a04eb8baea598753d5fa174dbe85 (git)
Affected: eac3731bd04c7131478722a3c148b78774553116 , < 9f603e66e1c59c1d25e60eb0636cb307d190782e (git)
Affected: eac3731bd04c7131478722a3c148b78774553116 , < ebaf81317e42aa990ad20b113cfe3a7b20d4e937 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.21
Unaffected: 0 , < 2.6.21 (semver)
Unaffected: 6.1.120 , ≤ 6.1.* (semver)
Unaffected: 6.6.64 , ≤ 6.6.* (semver)
Unaffected: 6.11.11 , ≤ 6.11.* (semver)
Unaffected: 6.12.2 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:03:40.043157Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-401",
                "description": "CWE-401 Missing Release of Memory after Effective Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:07:19.744Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:47:38.382Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/iucv/af_iucv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "934326aef7ac4652f81c69d18bf44eebaefc39c3",
              "status": "affected",
              "version": "eac3731bd04c7131478722a3c148b78774553116",
              "versionType": "git"
            },
            {
              "lessThan": "42251c2d1ef1cb0822638bebb87ad9120c759673",
              "status": "affected",
              "version": "eac3731bd04c7131478722a3c148b78774553116",
              "versionType": "git"
            },
            {
              "lessThan": "783c2c6e61c5a04eb8baea598753d5fa174dbe85",
              "status": "affected",
              "version": "eac3731bd04c7131478722a3c148b78774553116",
              "versionType": "git"
            },
            {
              "lessThan": "9f603e66e1c59c1d25e60eb0636cb307d190782e",
              "status": "affected",
              "version": "eac3731bd04c7131478722a3c148b78774553116",
              "versionType": "git"
            },
            {
              "lessThan": "ebaf81317e42aa990ad20b113cfe3a7b20d4e937",
              "status": "affected",
              "version": "eac3731bd04c7131478722a3c148b78774553116",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/iucv/af_iucv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.21"
            },
            {
              "lessThan": "2.6.21",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.120",
                  "versionStartIncluding": "2.6.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.64",
                  "versionStartIncluding": "2.6.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.11",
                  "versionStartIncluding": "2.6.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.2",
                  "versionStartIncluding": "2.6.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "2.6.21",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\n\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\nat exit.\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\niucv_sock_destruct() during socket close. To fix this decrease\nskb refcount by one if MSG_PEEK is set in order to prevent memory\nleak and WARN_ON.\n\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G        W          6.10.0-rc7 #1\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\nCall Trace:\n        [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\n        [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\n        [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\n        [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\n        [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\n        [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\n        [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\n        [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\n        [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\n        [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\n        [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\n        [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\n        [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\n        Last Breaking-Event-Address:\n        [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:52:58.537Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/934326aef7ac4652f81c69d18bf44eebaefc39c3"
        },
        {
          "url": "https://git.kernel.org/stable/c/42251c2d1ef1cb0822638bebb87ad9120c759673"
        },
        {
          "url": "https://git.kernel.org/stable/c/783c2c6e61c5a04eb8baea598753d5fa174dbe85"
        },
        {
          "url": "https://git.kernel.org/stable/c/9f603e66e1c59c1d25e60eb0636cb307d190782e"
        },
        {
          "url": "https://git.kernel.org/stable/c/ebaf81317e42aa990ad20b113cfe3a7b20d4e937"
        }
      ],
      "title": "s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53210",
    "datePublished": "2024-12-27T13:49:56.183Z",
    "dateReserved": "2024-11-19T17:17:25.020Z",
    "dateUpdated": "2026-05-11T20:52:58.537Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53210",
      "date": "2026-09-17",
      "epss": "0.00222",
      "percentile": "0.12918"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\\n\\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\\nat exit.\\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\\niucv_sock_destruct() during socket close. To fix this decrease\\nskb refcount by one if MSG_PEEK is set in order to prevent memory\\nleak and WARN_ON.\\n\\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G        W          6.10.0-rc7 #1\\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\\nCall Trace:\\n        [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\\n        [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\\n        [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\\n        [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\\n        [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\\n        [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\\n        [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\\n        [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\\n        [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\\n        [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\\n        [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\\n        [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\\n        [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\\n        Last Breaking-Event-Address:\\n        [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/iucv: MSG_PEEK provoca una p\\u00e9rdida de memoria en iucv_sock_destruct(). Pasar el indicador MSG_PEEK a skb_recv_datagram() incrementa el recuento de referencias de skb (skb-\u0026gt;users) y iucv_sock_recvmsg() no decrementa el recuento de referencias de skb al salir. Esto da como resultado una p\\u00e9rdida de memoria de skb en skb_queue_purge() y WARN_ON en iucv_sock_destruct() durante el cierre del socket. Para solucionar esto, disminuya el recuento de referencias de skb en uno si MSG_PEEK est\\u00e1 configurado para evitar la p\\u00e9rdida de memoria y WARN_ON. ADVERTENCIA: CPU: 2 PID: 6292 en net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv] CPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: cargado Contaminado: GW 6.10.0-rc7 #1 Nombre del hardware: IBM 3931 A01 704 (z/VM 7.3.0) Rastreo de llamadas: [\u0026lt;001587c682c4aa98\u0026gt;] iucv_sock_destruct+0x148/0x1a0 [af_iucv] [\u0026lt;001587c682c4a9d0\u0026gt;] iucv_sock_destruct+0x80/0x1a0 [af_iucv] [\u0026lt;001587c704117a32\u0026gt;] __sk_destruct+0x52/0x550 [\u0026lt;001587c704104a54\u0026gt;] __sock_release+0xa4/0x230 [\u0026lt;001587c704104c0c\u0026gt;] sock_close+0x2c/0x40 [\u0026lt;001587c702c5f5a8\u0026gt;] __fput+0x2e8/0x970 [\u0026lt;001587c7024148c4\u0026gt;] task_work_run+0x1c4/0x2c0 [\u0026lt;001587c7023b0716\u0026gt;] do_exit+0x996/0x1050 [\u0026lt;001587c7023b13aa\u0026gt;] do_group_exit+0x13a/0x360 [\u0026lt;001587c7023b1626\u0026gt;] __s390x_sys_exit_group+0x56/0x60 [\u0026lt;001587c7022bccca\u0026gt;] do_syscall+0x27a/0x380 [\u0026lt;001587c7049a6a0c\u0026gt;] __do_syscall+0x9c/0x160 [\u0026lt;001587c7049ce8a8\u0026gt;] system_call+0x70/0x98 \\u00daltima direcci\\u00f3n del evento de interrupci\\u00f3n: [\u0026lt;001587c682c4a9d4\u0026gt;] iucv_sock_destruct+0x84/0x1a0 [af_iucv]\"}]",
      "id": "CVE-2024-53210",
      "lastModified": "2024-12-27T14:15:28.897",
      "published": "2024-12-27T14:15:28.897",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/42251c2d1ef1cb0822638bebb87ad9120c759673\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/783c2c6e61c5a04eb8baea598753d5fa174dbe85\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/934326aef7ac4652f81c69d18bf44eebaefc39c3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9f603e66e1c59c1d25e60eb0636cb307d190782e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/ebaf81317e42aa990ad20b113cfe3a7b20d4e937\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "microsoft_vex": {
      "current_release_date": "2026-03-31T15:15:02.000Z",
      "cve": "CVE-2024-53210",
      "id": "msrc_CVE-2024-53210",
      "initial_release_date": "2024-12-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "product_status:under_investigation": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-53210.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53210\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-12-27T14:15:28.897\",\"lastModified\":\"2026-06-17T08:08:36.007\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\\n\\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\\nat exit.\\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\\niucv_sock_destruct() during socket close. To fix this decrease\\nskb refcount by one if MSG_PEEK is set in order to prevent memory\\nleak and WARN_ON.\\n\\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G        W          6.10.0-rc7 #1\\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\\nCall Trace:\\n        [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\\n        [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\\n        [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\\n        [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\\n        [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\\n        [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\\n        [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\\n        [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\\n        [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\\n        [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\\n        [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\\n        [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\\n        [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\\n        Last Breaking-Event-Address:\\n        [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/iucv: MSG_PEEK provoca una p\u00e9rdida de memoria en iucv_sock_destruct(). Pasar el indicador MSG_PEEK a skb_recv_datagram() incrementa el recuento de referencias de skb (skb-\u0026gt;users) y iucv_sock_recvmsg() no decrementa el recuento de referencias de skb al salir. Esto da como resultado una p\u00e9rdida de memoria de skb en skb_queue_purge() y WARN_ON en iucv_sock_destruct() durante el cierre del socket. Para solucionar esto, disminuya el recuento de referencias de skb en uno si MSG_PEEK est\u00e1 configurado para evitar la p\u00e9rdida de memoria y WARN_ON. ADVERTENCIA: CPU: 2 PID: 6292 en net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv] CPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: cargado Contaminado: GW 6.10.0-rc7 #1 Nombre del hardware: IBM 3931 A01 704 (z/VM 7.3.0) Rastreo de llamadas: [\u0026lt;001587c682c4aa98\u0026gt;] iucv_sock_destruct+0x148/0x1a0 [af_iucv] [\u0026lt;001587c682c4a9d0\u0026gt;] iucv_sock_destruct+0x80/0x1a0 [af_iucv] [\u0026lt;001587c704117a32\u0026gt;] __sk_destruct+0x52/0x550 [\u0026lt;001587c704104a54\u0026gt;] __sock_release+0xa4/0x230 [\u0026lt;001587c704104c0c\u0026gt;] sock_close+0x2c/0x40 [\u0026lt;001587c702c5f5a8\u0026gt;] __fput+0x2e8/0x970 [\u0026lt;001587c7024148c4\u0026gt;] task_work_run+0x1c4/0x2c0 [\u0026lt;001587c7023b0716\u0026gt;] do_exit+0x996/0x1050 [\u0026lt;001587c7023b13aa\u0026gt;] do_group_exit+0x13a/0x360 [\u0026lt;001587c7023b1626\u0026gt;] __s390x_sys_exit_group+0x56/0x60 [\u0026lt;001587c7022bccca\u0026gt;] do_syscall+0x27a/0x380 [\u0026lt;001587c7049a6a0c\u0026gt;] __do_syscall+0x9c/0x160 [\u0026lt;001587c7049ce8a8\u0026gt;] system_call+0x70/0x98 \u00daltima direcci\u00f3n del evento de interrupci\u00f3n: [\u0026lt;001587c682c4a9d4\u0026gt;] iucv_sock_destruct+0x84/0x1a0 [af_iucv]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/iucv/af_iucv.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"eac3731bd04c7131478722a3c148b78774553116\",\"lessThan\":\"934326aef7ac4652f81c69d18bf44eebaefc39c3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"eac3731bd04c7131478722a3c148b78774553116\",\"lessThan\":\"42251c2d1ef1cb0822638bebb87ad9120c759673\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"eac3731bd04c7131478722a3c148b78774553116\",\"lessThan\":\"783c2c6e61c5a04eb8baea598753d5fa174dbe85\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"eac3731bd04c7131478722a3c148b78774553116\",\"lessThan\":\"9f603e66e1c59c1d25e60eb0636cb307d190782e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"eac3731bd04c7131478722a3c148b78774553116\",\"lessThan\":\"ebaf81317e42aa990ad20b113cfe3a7b20d4e937\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/iucv/af_iucv.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.21\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.21\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.120\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.64\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.11\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.2\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-10-01T20:03:40.043157Z\",\"id\":\"CVE-2024-53210\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.21\",\"versionEndExcluding\":\"6.1.120\",\"matchCriteriaId\":\"1B71E394-0408-4562-9D95-9A76BEE44EC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.64\",\"matchCriteriaId\":\"CA16DEE3-ABEC-4449-9F4A-7A3DC4FC36C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.11\",\"matchCriteriaId\":\"21434379-192D-472F-9B54-D45E3650E893\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12\",\"versionEndExcluding\":\"6.12.2\",\"matchCriteriaId\":\"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/42251c2d1ef1cb0822638bebb87ad9120c759673\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/783c2c6e61c5a04eb8baea598753d5fa174dbe85\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/934326aef7ac4652f81c69d18bf44eebaefc39c3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9f603e66e1c59c1d25e60eb0636cb307d190782e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ebaf81317e42aa990ad20b113cfe3a7b20d4e937\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:57:37+00:00",
      "cve": "CVE-2024-53210",
      "id": "CVE-2024-53210",
      "initial_release_date": "2024-12-27T00:00:00+00:00",
      "product_status:known_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53210.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T16:42:07Z",
      "cve": "CVE-2024-53210",
      "id": "CVE-2024-53210",
      "initial_release_date": "2024-12-28T03:50:12Z",
      "product_status:known_affected": "671",
      "product_status:known_not_affected": "90",
      "product_status:recommended": "494",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-53210",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-53210.json",
      "version": "76"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53210\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T20:03:40.043157Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-401\", \"description\": \"CWE-401 Missing Release of Memory after Effective Lifetime\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:38:29.907Z\"}}], \"cna\": {\"title\": \"s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"eac3731bd04c7131478722a3c148b78774553116\", \"lessThan\": \"934326aef7ac4652f81c69d18bf44eebaefc39c3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"eac3731bd04c7131478722a3c148b78774553116\", \"lessThan\": \"42251c2d1ef1cb0822638bebb87ad9120c759673\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"eac3731bd04c7131478722a3c148b78774553116\", \"lessThan\": \"783c2c6e61c5a04eb8baea598753d5fa174dbe85\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"eac3731bd04c7131478722a3c148b78774553116\", \"lessThan\": \"9f603e66e1c59c1d25e60eb0636cb307d190782e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"eac3731bd04c7131478722a3c148b78774553116\", \"lessThan\": \"ebaf81317e42aa990ad20b113cfe3a7b20d4e937\", \"versionType\": \"git\"}], \"programFiles\": [\"net/iucv/af_iucv.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.21\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.21\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.120\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/iucv/af_iucv.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/934326aef7ac4652f81c69d18bf44eebaefc39c3\"}, {\"url\": \"https://git.kernel.org/stable/c/42251c2d1ef1cb0822638bebb87ad9120c759673\"}, {\"url\": \"https://git.kernel.org/stable/c/783c2c6e61c5a04eb8baea598753d5fa174dbe85\"}, {\"url\": \"https://git.kernel.org/stable/c/9f603e66e1c59c1d25e60eb0636cb307d190782e\"}, {\"url\": \"https://git.kernel.org/stable/c/ebaf81317e42aa990ad20b113cfe3a7b20d4e937\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\\n\\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\\nat exit.\\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\\niucv_sock_destruct() during socket close. To fix this decrease\\nskb refcount by one if MSG_PEEK is set in order to prevent memory\\nleak and WARN_ON.\\n\\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G        W          6.10.0-rc7 #1\\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\\nCall Trace:\\n        [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\\n        [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\\n        [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\\n        [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\\n        [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\\n        [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\\n        [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\\n        [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\\n        [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\\n        [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\\n        [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\\n        [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\\n        [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\\n        Last Breaking-Event-Address:\\n        [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.120\", \"versionStartIncluding\": \"2.6.21\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.64\", \"versionStartIncluding\": \"2.6.21\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.11\", \"versionStartIncluding\": \"2.6.21\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.2\", \"versionStartIncluding\": \"2.6.21\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13\", \"versionStartIncluding\": \"2.6.21\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:55:59.259Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53210\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-01T20:07:19.744Z\", \"dateReserved\": \"2024-11-19T17:17:25.020Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-12-27T13:49:56.183Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.