🛡️ CVE-2024-53058 on Ubuntu — linux

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload to be transmitted on a certain platform that the DMA AXI address width is configured to 40-bit/48-bit, or the size of the non-paged data is bigger than TSO_MAX_BUFF_SIZE on a certain platform that the DMA AXI address width is configured to 32-bit, then this SKB requires at least two DMA transmit descriptors to serve it. For example, three descriptors are allocated to split one DMA buffer mapped from one piece of non-paged data: dma_desc[N + 0], dma_desc[N + 1], dma_desc[N + 2]. Then three elements of tx_q->tx_skbuff_dma[] will be allocated to hold extra information to be reused in stmmac_tx_clean(): tx_q->tx_skbuff_dma[N + 0], tx_q->tx_skbuff_dma[N + 1], tx_q->tx_skbuff_dma[N + 2]. Now we focus on tx_q->tx_skbuff_dma[entry].buf, which is the DMA buffer address returned by DMA mapping call. stmmac_tx_clean() will try to unmap the DMA buffer _ONLY_IF_ tx_q->tx_skbuff_dma[entry].buf is a valid buffer address. The expected behavior that saves DMA buffer address of this non-paged data to tx_q->tx_skbuff_dma[entry].buf is: tx_q->tx_skbuff_dma[N + 0].buf = NULL; tx_q->tx_skbuff_dma[N + 1].buf = NULL; tx_q->tx_skbuff_dma[N + 2].buf = dma_map_single(); Unfortunately, the current code misbehaves like this: tx_q->tx_skbuff_dma[N + 0].buf = dma_map_single(); tx_q->tx_skbuff_dma[N + 1].buf = NULL; tx_q->tx_skbuff_dma[N + 2].buf = NULL; On the stmmac_tx_clean() side, when dma_desc[N + 0] is closed by the DMA engine, tx_q->tx_skbuff_dma[N + 0].buf is a valid buffer address obviously, then the DMA buffer will be unmapped immediately. There may be a rare case that the DMA engine does not finish the pending dma_desc[N + 1], dma_desc[N + 2] yet. Now things will go horribly wrong, DMA is going to access a unmapped/unreferenced memory region, corrupted data will be transmited or iommu fault will be triggered :( In contrast, the for-loop that maps SKB fragments behaves perfectly as expected, and that is how the driver should do for both non-paged data and paged frags actually. This patch corrects DMA map/unmap sequences by fixing the array index for tx_q->tx_skbuff_dma[entry].buf when assigning DMA buffer address. Tested and verified on DWXGMAC CORE 3.20a

Distribution advisory

This page covers CVE-2024-53058 as tracked by Ubuntu, for the package linux. The fix is available in version 6.8.0-58.60; earlier versions remain affected.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity low, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Attack vector: Network — reachable from anywhere that can route to the service.
Attack complexity: Low — the attack works reliably, with no preparation.
Privileges required: None — an unauthenticated stranger can try it.
User interaction: None — nobody has to be tricked into anything.
Scope: Unchanged — the damage stays inside the vulnerable component.
Confidentiality impact: High — total loss, or loss the attacker controls.
Integrity impact: Low — limited, and the attacker does not choose what is affected.
Availability impact: High — total loss, or loss the attacker controls.

Affected software

UBUNTU-CVE-2024-53058 is recorded against 133 packages.

linux (fixed in 6.8.0-58.60)
linux-allwinner-5.19
linux-aws (fixed in 6.8.0-1027.29)
linux-aws-5.0
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15 (fixed in 5.15.0-1080.87~20.04.1)
linux-aws-5.19
linux-aws-5.3
linux-aws-5.4
linux-aws-5.8
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8 (fixed in 6.8.0-1027.29~22.04.1)
linux-aws-fips (fixed in 5.15.0-1078.85+fips1)
linux-aws-hwe
linux-azure (fixed in 6.8.0-1027.32)
linux-azure-4.15
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15 (fixed in 5.15.0-1081.90~20.04.1)
linux-azure-5.19
linux-azure-5.3
linux-azure-5.4

Show the remaining 109 packages

linux-azure-5.8
linux-azure-6.11 (fixed in 6.11.0-1012.12~24.04.1)
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8 (fixed in 6.8.0-1027.32~22.04.1)
linux-azure-edge
linux-azure-fde (fixed in 5.15.0-1081.90.1)
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fips (fixed in 5.15.0-1080.89+fips1)
linux-azure-nvidia (fixed in 6.8.0-1014.15)
linux-bluefield
linux-fips (fixed in 6.8.0-78.78+fips1)
linux-gcp (fixed in 6.8.0-1028.30)
linux-gcp-4.15
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15 (fixed in 5.15.0-1077.86~20.04.1)
linux-gcp-5.19
linux-gcp-5.3
linux-gcp-5.4
linux-gcp-5.8
linux-gcp-6.11 (fixed in 6.11.0-1011.11~24.04.1)
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-6.8 (fixed in 6.8.0-1028.30~22.04.1)
linux-gcp-fips (fixed in 5.15.0-1077.86+fips1)
linux-gke (fixed in 6.8.0-1023.27)
linux-gke-4.15
linux-gke-5.15
linux-gke-5.4
linux-gkeop (fixed in 6.8.0-1010.12)
linux-gkeop-5.15
linux-gkeop-5.4
linux-hwe
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15 (fixed in 5.15.0-134.145~20.04.1)
linux-hwe-5.19
linux-hwe-5.4
linux-hwe-5.8
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-6.8 (fixed in 6.8.0-58.60~22.04.1)
linux-hwe-edge
linux-ibm (fixed in 6.8.0-1024.24)
linux-ibm-5.15 (fixed in 5.15.0-1074.77~20.04.1)
linux-ibm-5.4
linux-ibm-6.8 (fixed in 6.8.0-1024.24~22.04.1)
linux-intel-5.13
linux-intel-iot-realtime (fixed in 5.15.0-1071.73)
linux-intel-iotg (fixed in 5.15.0-1073.79)
linux-intel-iotg-5.15 (fixed in 5.15.0-1073.79~20.04.2)
linux-iot
linux-kvm (fixed in 5.15.0-1076.81)
linux-lowlatency (fixed in 6.8.0-58.60.1)
linux-lowlatency-hwe-5.15 (fixed in 5.15.0-133.143~20.04.1)
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.8 (fixed in 6.8.0-58.60.1~22.04.1)
linux-nvidia (fixed in 6.8.0-1026.29)
linux-nvidia-6.11 (fixed in 6.11.0-1007.7)
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8 (fixed in 6.8.0-1026.29~22.04.1)
linux-nvidia-lowlatency (fixed in 6.8.0-1026.29.1)
linux-nvidia-tegra (fixed in 6.8.0-1008.8)
linux-nvidia-tegra-5.15 (fixed in 5.15.0-1039.39~20.04.1)
linux-nvidia-tegra-igx (fixed in 5.15.0-1021.21)
linux-oem
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-5.6
linux-oem-6.0
linux-oem-6.1
linux-oem-6.11 (fixed in 6.11.0-1015.15)
linux-oem-6.5
linux-oem-6.8 (fixed in 6.8.0-1026.26)
linux-oracle (fixed in 6.8.0-1024.25)
linux-oracle-5.0
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15 (fixed in 5.15.0-1075.81~20.04.1)
linux-oracle-5.3
linux-oracle-5.4
linux-oracle-5.8
linux-oracle-6.5
linux-oracle-6.8 (fixed in 6.8.0-1024.25~22.04.1)
linux-raspi (fixed in 6.8.0-1028.32)
linux-raspi-5.4
linux-raspi-realtime (fixed in 6.8.0-2023.24)
linux-raspi2
linux-realtime (fixed in 6.8.1-1020.21)
linux-realtime-6.8 (fixed in 6.8.1-1020.21~22.04.1)
linux-riscv (fixed in 6.8.0-58.60.1)
linux-riscv-5.11
linux-riscv-5.15 (fixed in 5.15.0-1073.77~20.04.1)
linux-riscv-5.19
linux-riscv-5.8
linux-riscv-6.5
linux-riscv-6.8 (fixed in 6.8.0-58.60.1~22.04.1)
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx (fixed in 6.8.0-1017.18)
linux-xilinx-zynqmp (fixed in 5.15.0-1044.48)

Timeline and source

Published on 19 November 2024 and last revised on 19 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

linux has other advisories on record. If you are patching this one, these are worth checking on the same host:

DEBIAN-CVE-2022-4994 (published 30 Jul 2026)
CVE-2026-35233 (4.4 Medium, published 1 May 2026)
CVE-2026-21996 (3.3 Low, published 1 May 2026)
CVE-2026-21991 (5.5 Medium, published 16 Mar 2026)
CGA-w6xv-3fg4-grm5 (published 29 Jan 2026)
CGA-mcwh-q4vm-9f29 (published 29 Jan 2026)
CGA-434c-h783-9v24 (published 7 Jan 2026)
CGA-fmgm-3rrr-58xf (published 7 Jan 2026)

CVE-2024-53058 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

BellSoft — BELL-CVE-2024-53058 Base record — CVE-2024-53058 Debian — DEBIAN-CVE-2024-53058 Debian 11 (Root.io) — ROOT-OS-DEBIAN-11-CVE-2024-53058

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-11-19

Updated 2026-08-20

Modified 2026-08-19

Fix URL N/A

Affected Packages

Software	From version	Fixed in
linux	—	6.8.0-58.60
linux-allwinner-5.19	—	—
linux-aws	—	6.8.0-1027.29
linux-aws-5.0	—	—
linux-aws-5.11	—	—
linux-aws-5.13	—	—
linux-aws-5.15	—	5.15.0-1080.87~20.04.1
linux-aws-5.19	—	—
linux-aws-5.3	—	—
linux-aws-5.4	—	—
linux-aws-5.8	—	—
linux-aws-6.2	—	—
linux-aws-6.5	—	—
linux-aws-6.8	—	6.8.0-1027.29~22.04.1
linux-aws-fips	—	5.15.0-1078.85+fips1
linux-aws-hwe	—	—
linux-azure	—	6.8.0-1027.32
linux-azure-4.15	—	—
linux-azure-5.11	—	—
linux-azure-5.13	—	—
linux-azure-5.15	—	5.15.0-1081.90~20.04.1
linux-azure-5.19	—	—
linux-azure-5.3	—	—
linux-azure-5.4	—	—
linux-azure-5.8	—	—
linux-azure-6.11	—	6.11.0-1012.12~24.04.1
linux-azure-6.2	—	—
linux-azure-6.5	—	—
linux-azure-6.8	—	6.8.0-1027.32~22.04.1
linux-azure-edge	—	—
linux-azure-fde	—	5.15.0-1081.90.1
linux-azure-fde-5.19	—	—
linux-azure-fde-6.2	—	—
linux-azure-fips	—	5.15.0-1080.89+fips1
linux-azure-nvidia	—	6.8.0-1014.15
linux-bluefield	—	—
linux-fips	—	6.8.0-78.78+fips1
linux-gcp	—	6.8.0-1028.30
linux-gcp-4.15	—	—
linux-gcp-5.11	—	—
linux-gcp-5.13	—	—
linux-gcp-5.15	—	5.15.0-1077.86~20.04.1
linux-gcp-5.19	—	—
linux-gcp-5.3	—	—
linux-gcp-5.4	—	—
linux-gcp-5.8	—	—
linux-gcp-6.11	—	6.11.0-1011.11~24.04.1
linux-gcp-6.2	—	—
linux-gcp-6.5	—	—
linux-gcp-6.8	—	6.8.0-1028.30~22.04.1
linux-gcp-fips	—	5.15.0-1077.86+fips1
linux-gke	—	6.8.0-1023.27
linux-gke-4.15	—	—
linux-gke-5.15	—	—
linux-gke-5.4	—	—
linux-gkeop	—	6.8.0-1010.12
linux-gkeop-5.15	—	—
linux-gkeop-5.4	—	—
linux-hwe	—	—
linux-hwe-5.11	—	—
linux-hwe-5.13	—	—
linux-hwe-5.15	—	5.15.0-134.145~20.04.1
linux-hwe-5.19	—	—
linux-hwe-5.4	—	—
linux-hwe-5.8	—	—
linux-hwe-6.2	—	—
linux-hwe-6.5	—	—
linux-hwe-6.8	—	6.8.0-58.60~22.04.1
linux-hwe-edge	—	—
linux-ibm	—	6.8.0-1024.24
linux-ibm-5.15	—	5.15.0-1074.77~20.04.1
linux-ibm-5.4	—	—
linux-ibm-6.8	—	6.8.0-1024.24~22.04.1
linux-intel-5.13	—	—
linux-intel-iot-realtime	—	5.15.0-1071.73
linux-intel-iotg	—	5.15.0-1073.79
linux-intel-iotg-5.15	—	5.15.0-1073.79~20.04.2
linux-iot	—	—
linux-kvm	—	5.15.0-1076.81
linux-lowlatency	—	6.8.0-58.60.1
linux-lowlatency-hwe-5.15	—	5.15.0-133.143~20.04.1
linux-lowlatency-hwe-5.19	—	—
linux-lowlatency-hwe-6.2	—	—
linux-lowlatency-hwe-6.5	—	—
linux-lowlatency-hwe-6.8	—	6.8.0-58.60.1~22.04.1
linux-nvidia	—	6.8.0-1026.29
linux-nvidia-6.11	—	6.11.0-1007.7
linux-nvidia-6.2	—	—
linux-nvidia-6.5	—	—
linux-nvidia-6.8	—	6.8.0-1026.29~22.04.1
linux-nvidia-lowlatency	—	6.8.0-1026.29.1
linux-nvidia-tegra	—	6.8.0-1008.8
linux-nvidia-tegra-5.15	—	5.15.0-1039.39~20.04.1
linux-nvidia-tegra-igx	—	5.15.0-1021.21
linux-oem	—	—
linux-oem-5.10	—	—
linux-oem-5.13	—	—
linux-oem-5.14	—	—
linux-oem-5.17	—	—
linux-oem-5.6	—	—
linux-oem-6.0	—	—
linux-oem-6.1	—	—
linux-oem-6.11	—	6.11.0-1015.15
linux-oem-6.5	—	—
linux-oem-6.8	—	6.8.0-1026.26
linux-oracle	—	6.8.0-1024.25
linux-oracle-5.0	—	—
linux-oracle-5.11	—	—
linux-oracle-5.13	—	—
linux-oracle-5.15	—	5.15.0-1075.81~20.04.1
linux-oracle-5.3	—	—
linux-oracle-5.4	—	—
linux-oracle-5.8	—	—
linux-oracle-6.5	—	—
linux-oracle-6.8	—	6.8.0-1024.25~22.04.1
linux-raspi	—	6.8.0-1028.32
linux-raspi-5.4	—	—
linux-raspi-realtime	—	6.8.0-2023.24
linux-raspi2	—	—
linux-realtime	—	6.8.1-1020.21
linux-realtime-6.8	—	6.8.1-1020.21~22.04.1
linux-riscv	—	6.8.0-58.60.1
linux-riscv-5.11	—	—
linux-riscv-5.15	—	5.15.0-1073.77~20.04.1
linux-riscv-5.19	—	—
linux-riscv-5.8	—	—
linux-riscv-6.5	—	—
linux-riscv-6.8	—	6.8.0-58.60.1~22.04.1
linux-starfive-5.19	—	—
linux-starfive-6.2	—	—
linux-starfive-6.5	—	—
linux-xilinx	—	6.8.0-1017.18
linux-xilinx-zynqmp	—	5.15.0-1044.48

References

REPORT https://ubuntu.com/security/CVE-2024-53058

REPORT https://www.cve.org/CVERecord?id=CVE-2024-53058

REPORT https://git.kernel.org/linus/66600fac7a984dea4ae095411f644770b2561ede

REPORT https://git.kernel.org/stable/c/ece593fc9c00741b682869d3f3dc584d37b7c9df

REPORT https://git.kernel.org/stable/c/a3ff23f7c3f0e13f718900803e090fd3997d6bc9

REPORT https://git.kernel.org/stable/c/07c9c26e37542486e34d767505e842f48f29c3f6

REPORT https://git.kernel.org/stable/c/58d23d835eb498336716cca55b5714191a309286

REPORT https://git.kernel.org/stable/c/66600fac7a984dea4ae095411f644770b2561ede

ADVISORY https://ubuntu.com/security/notices/USN-7276-1

ADVISORY https://ubuntu.com/security/notices/USN-7277-1

ADVISORY https://ubuntu.com/security/notices/USN-7288-1

ADVISORY https://ubuntu.com/security/notices/USN-7289-1

ADVISORY https://ubuntu.com/security/notices/USN-7291-1

ADVISORY https://ubuntu.com/security/notices/USN-7288-2

ADVISORY https://ubuntu.com/security/notices/USN-7289-2

ADVISORY https://ubuntu.com/security/notices/USN-7289-3

ADVISORY https://ubuntu.com/security/notices/USN-7305-1

ADVISORY https://ubuntu.com/security/notices/USN-7289-4

ADVISORY https://ubuntu.com/security/notices/USN-7308-1

ADVISORY https://ubuntu.com/security/notices/USN-7310-1

ADVISORY https://ubuntu.com/security/notices/USN-7331-1

ADVISORY https://ubuntu.com/security/notices/USN-7388-1

ADVISORY https://ubuntu.com/security/notices/USN-7389-1

ADVISORY https://ubuntu.com/security/notices/USN-7390-1

ADVISORY https://ubuntu.com/security/notices/USN-7449-1

ADVISORY https://ubuntu.com/security/notices/USN-7450-1

ADVISORY https://ubuntu.com/security/notices/USN-7451-1

ADVISORY https://ubuntu.com/security/notices/USN-7452-1

ADVISORY https://ubuntu.com/security/notices/USN-7453-1

ADVISORY https://ubuntu.com/security/notices/USN-7458-1

ADVISORY https://ubuntu.com/security/notices/USN-7449-2

ADVISORY https://ubuntu.com/security/notices/USN-7468-1

ADVISORY https://ubuntu.com/security/notices/USN-7523-1

ADVISORY https://ubuntu.com/security/notices/USN-7524-1

🔗 NVD 🔗 Mitre

Similar Threats

Exploit Protection

Are you running linux?

UBUNTU-CVE-2024-53058 carries CVSS 9.4 Critical rating. BotEraser checks your installation against this and other known CVE records, and blocks IPs associated with exploit activity.

Check My Site For UBUNTU-CVE-2024-53058 →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ CVE-2024-53058 on Ubuntu — linux

Description

Distribution advisory

How this vulnerability can be exploited

CVSS metrics in full

Affected software

Timeline and source

References

Other advisories for this package

CVE-2024-53058 on other distributions

Are you running linux?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe