Riskcovery

CVE-2024-58016

safesetid: check size of policy writes

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

safesetid: check size of policy writes

syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc.

Check the size specified for write buffers before allocating.

[PM: subject tweak]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before 976284b94f2021df09829e37a367e19b84d9e5f3Affected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before ecf6a4a558097920447a6fb84dfdb279e2ac749aAffected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before a0dec65f88c8d9290dfa1d2ca1e897abe54c5881Affected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before 96fae5bd1589731592d30b3953a90a77ef3928a6Affected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before 36b385d0f2b4c0bf41d491e19075ecd990d2bf94Affected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before c71d35676d46090c891b6419f253fb92a1a9f4ebAffected
  • aeca4e2ca65c1aeacfbe520684e6421719d99417 to before f09ff307c7299392f1c88f763299e24bc99811c7Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 5.10.235 through 5.10.*Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.78 through 6.6.*Not affected
  • 6.12.14 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.