PT-2025-8770 · Linux+1 · Linux Kernel+1

Dan Carpenter · Published 2025-02-27 · Updated 2025-02-28 · CVE-2024-57983

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue in the Linux kernel has been identified, specifically in the mailbox component, th1520. The functions th1520 mbox suspend noirq and th1520 mbox resume noirq are designed to save and restore interrupt mask registers in the MBOX ICU0. However, an incorrectly sized array used to store these registers led to memory corruption when accessing all four registers.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the incorrect array size in the th1520 mailbox component. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-57983

Affected Products

Astra Linux

Linux Kernel

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57983.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-57983 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-57983 · Vendor Advisory
• https://git.kernel.org/stable/c/2cd12c7fba59f30369e8647a2b726c7280903304 · Patch
• https://git.kernel.org/stable/c/db049866943a38bf46a34fa120d526663339d7a5 · Patch
• https://cve.org/CVERecord?id=CVE-2024-57983 · Security Note
• https://ubuntu.com/security/CVE-2024-57983 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57983 · Security Note
• https://git.kernel.org/linus/db049866943a38bf46a34fa120d526663339d7a5 · Note
• https://twitter.com/CVEnew/status/1895622645288194535 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note