Review reviewHigh

CVE-2024-53082

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.

CVSS: 7.1
EPSS: -
CISA KEV: Not listed
Published: 2024.11.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= c7114b1249fa3b5f3a434606ba4cc89c4a27d618 < f3401e3c8d339ddb6ccb2e3d11ad634b7846a806, >= c7114b1249fa3b5f3a434606ba4cc89c4a27d618 < af0aa8aecbe8985079232902894cc4cb62795691, >= c7114b1249fa3b5f3a434606ba4cc89c4a27d618 < 6a18a783b1fa590ad1ed785907263e4b86adcfe2, >= c7114b1249fa3b5f3a434606ba4cc89c4a27d618 < 3f7d9c1964fcd16d02a8a9d4fd6f6cb60c4cc530, >= 5.18, >= 5.18 < 6.1.117, >= 6.2 < 6.6.61, >= 6.7 < 6.11.8, 6.12
Fixed versions: 6.1.117, 6.6.61, 6.11.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125