CVE-2024-58016
safesetid: check size of policy writes
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
safesetid: check size of policy writes
syzbot attempts to write a buffer with a large size to a sysfs entry
with writes handled by handle_policy_update(), triggering a warning
in kmalloc.
Check the size specified for write buffers before allocating.
[PM: subject tweak]
Affected products
Linux · LinuxReferences
https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://git.kernel.org/stable/c/36b385d0f2b4c0bf41d491e19075ecd990d2bf94https://git.kernel.org/stable/c/96fae5bd1589731592d30b3953a90a77ef3928a6https://git.kernel.org/stable/c/976284b94f2021df09829e37a367e19b84d9e5f3https://git.kernel.org/stable/c/a0dec65f88c8d9290dfa1d2ca1e897abe54c5881https://git.kernel.org/stable/c/c71d35676d46090c891b6419f253fb92a1a9f4ebhttps://git.kernel.org/stable/c/ecf6a4a558097920447a6fb84dfdb279e2ac749ahttps://git.kernel.org/stable/c/f09ff307c7299392f1c88f763299e24bc99811c7https://lists.debian.org/debian-lts-announce/2025/03/msg00028.htmlhttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html