PT-2025-3579 · Linux · Linux Kernel

Mikhail Gavrilov · Published 2024-12-20 · Updated 2025-10-16 · CVE-2024-57800

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759

Description A vulnerability in the Linux kernel has been resolved, related to the ALSA memalloc component. The issue arises when the CONFIG DMA API DEBUG option is enabled, resulting in a warning about a device driver failing to check for map errors. The warning is triggered by the dma mapping error() function, which is recommended for checking returned DMA addresses. The vulnerability is associated with the snd hda intel device driver and involves the debug dma unmap page(), snd dma wc free(), snd pcm lib free pages(), snd pcm common ioctl(), and snd pcm ioctl() functions.

Recommendations To resolve the issue, update the Linux kernel to a version later than 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759. As a temporary workaround, consider disabling the CONFIG DMA API DEBUG option to prevent the warning from being triggered. However, this is not a recommended long-term solution, as it may mask other potential issues.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-03872

CVE-2024-57800

Affected Products

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57800.json · Exploit
• https://git.kernel.org/stable/c/fa0308134d26dbbeb209a1581eea46df663866b6 · Patch
• https://cve.org/CVERecord?id=CVE-2024-57800 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57800 · Security Note
• https://git.kernel.org/stable/c/c180c3f42d340e8dcb9094bb8ea7d477d37081a8 · Patch
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-57800 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57800 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-57800 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-57800 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03872 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-57800 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-57800 · Vendor Advisory
• https://t.me/cveNotify/139011 · Telegram Post