PT-2025-8985 · Linux+2 · Linux Kernel+2

Published 2025-02-27 · Updated 2026-03-13 · CVE-2024-58022

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel has been resolved, specifically in the mailbox component, th1520. The issue involved incorrect error checking in the devm ioremap() function, which returns NULL instead of error pointers. This has been updated to match the correct error checking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-58022

Affected Products

Astra Linux

Debian

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58022.json · Exploit
• https://git.kernel.org/stable/c/d0f98e14c010bcf27898b635a54c1994ac4110a8 · Patch
• https://ubuntu.com/security/CVE-2024-58022 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-58022 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-58022 · Security Note
• https://git.kernel.org/stable/c/ecbde88e544ff016fa08bbf2156dc431bb123e9b · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-58022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-58022 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2024-58022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58022 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-58022 · Vendor Advisory
• https://twitter.com/CVETracker/status/1895564819593416957 · Twitter Post
• https://git.kernel.org/linus/d0f98e14c010bcf27898b635a54c1994ac4110a8 · Note
• https://twitter.com/CVEnew/status/1895241174434357584 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note