Medium 5.5Published Nov 25, 2024

CVE-2024-53101fs: Fix uninitialized value issue in from_kuid and from_kgid

Updated under an hour ago (Oct 28, 2026, 12:40 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, attr->ia_uid and attr->ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.

CVSS: 5.5 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-908
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 468eedde23d6c9335935773f4f5764267d5a7763 before a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 17ecb40c5cc7755a321fb6148cba5797431ee5b8; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 9db25c2b41c34963c3ccf473b08171f87670652e; from 468eedde23d6c9335935773f4f5764267d5a7763 before b3e612bd8f64ce62e731e95f635e06a2efe3c80c; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 5a72b0d3497b818d8f000c347a7c11801eb27bfc; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 1cb5bfc5bfc651982b6203c224d49b7ddacf28bc; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 1c28bca1256aecece6e94b26b85cd07e08b0dc90; 468eedde23d6c9335935773f4f5764267d5a7763 builds before 15f34347481648a567db67fb473c23befb796af5	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.2	CISA ADP
linux linux_kernel linux:linux_kernel	before 4.19.324; from 4.20 before 5.4.286; from 5.5 before 5.10.230; from 5.11 before 5.15.173; from 5.16 before 6.1.118; from 6.2 before 6.6.62; from 6.7 before 6.11.9; 6.12; and 6 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf	patch
https://git.kernel.org/stable/c/17ecb40c5cc7755a321fb6148cba5797431ee5b8	patch
https://git.kernel.org/stable/c/9db25c2b41c34963c3ccf473b08171f87670652e	patch
https://git.kernel.org/stable/c/b3e612bd8f64ce62e731e95f635e06a2efe3c80c	patch
https://git.kernel.org/stable/c/5a72b0d3497b818d8f000c347a7c11801eb27bfc	patch
https://git.kernel.org/stable/c/1cb5bfc5bfc651982b6203c224d49b7ddacf28bc	patch
https://git.kernel.org/stable/c/1c28bca1256aecece6e94b26b85cd07e08b0dc90	patch
https://git.kernel.org/stable/c/15f34347481648a567db67fb473c23befb796af5	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.