CVE-2024-53058
A bug in the Linux kernel’s STMMAC network driver caused incorrect DMA mapping for large packets, which could lead to memory corruption or system crashes. The issue occurs when the driver mismanages DMA buffer addresses for non‑paged packet data, potentially allowing an attacker to trigger a fault or corrupt transmitted data. The vulnerability has been fixed in the kernel.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.12 and earlier versions that use the STMMAC driver for Ethernet hardware. Typical users include Linux system administrators and embedded device developers.
Real-world impact
An attacker could cause a denial of service by triggering a memory fault or corrupting data transmission, potentially leading to system crashes or compromised network integrity.
Why this severity
The CVSS score of 9.4 reflects the high impact on confidentiality, integrity, and availability, combined with the fact that the vulnerability can be exploited remotely with no authentication or user interaction.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for CVE-2024-53058 (e.g., the latest 6.12.x release).
- 02Reboot the system to load the updated kernel.
NVD description indicates the vulnerability has been resolved in the Linux kernel.
Timeline
- Nov 19, 2024 · Nov 19, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.