Cyber Resilience

CVE-2024-53081

Memory Safety in Linux Kernel 6.0 – 6.1.117

Published
19 November 2024
Modified
03 November 2025
Patch / advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0023 14th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2024-53081 is a medium-severity Wrap or Wraparound (CWE-191) vulnerability in Linux Linux Kernel. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 14th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the…

more

variables, this may underflow. Fix it ensuring that both sides of the expression are u64.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-26828Same product: Linux Linux Kernel
CVE-2026-43301Same product: Linux Linux Kernel
CVE-2026-23069Same product: Linux Linux Kernel
CVE-2026-43187Same product: Linux Linux Kernel
CVE-2026-46107Same product: Linux Linux Kernel
CVE-2023-53679Same product: Linux Linux Kernel
CVE-2023-53258Same product: Linux Linux Kernel
CVE-2026-31417Same product: Linux Linux Kernel
CVE-2026-43171Same product: Linux Linux Kernel
CVE-2024-35980Same product: Linux Linux Kernel

Affected Assets

linux
linux kernel
6.12 · 6.0 — 6.1.117 · 6.2 — 6.6.61 · 6.7 — 6.11.8

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 full match
prevents

Secure SDLC practices directly prevent integer underflow defects via input validation, bounds checking, and static analysis.

ID.RA-01 partial match
prevents

Vulnerability scanning and code analysis can surface underflow flaws after they are introduced.

PR.PS-02 partial match
prevents

Routine patching can remediate known underflow bugs once they are discovered in deployed software.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development catches integer underflow defects before release.

prevents

Secure development lifecycle mandates input validation and arithmetic checks that prevent integer underflow.

prevents

Application security requirements include bounds checking and safe arithmetic to avoid underflow conditions.

prevents

Secure architecture principles require defensive coding patterns that mitigate integer wraparound risks.

prevents

Secure coding standards directly prescribe safe integer handling and overflow/underflow prevention.

References