CVE-2024-53128 is a vulnerability in the Linux kernel affecting systems with KASAN_SW_TAGS and KASAN_STACK enabled. It causes the object_is_on_stack() function to produce incorrect results due to a discrepancy in pointer tagging, leading to erroneous stack object detection and potential kernel warnings. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a local attack vector with low attack complexity, requiring local privileges. The primary impact is a denial of service (system instability or crashes) due to debug object warnings, with no direct impact on confidentiality or integrity. There is currently no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.11.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
Dec 10, 2024kernel: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
Dec 4, 2024