PT-2025-8987 · Linux+1 · Linux Kernel+1

Published 2024-12-21 · Updated 2025-03-01 · CVE-2024-58042

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential deadlock issue in the Linux kernel's rhashtable has been resolved. The problem occurred due to a possible circular locking dependency between the rhashtable bucket, rq lock, and dsq lock. This could trigger a lockdep warning. The fix involves moving the hash table growth check and work scheduling outside the rht lock, thus breaking the potential deadlock chain. This change improves the flexibility of rhashtable by removing restrictive locking, making it more suitable for use in scheduler and workqueue contexts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2025-12269

CVE-2024-58042

Affected Products

Astra Linux

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58042.json · Exploit
• https://ubuntu.com/security/CVE-2024-58042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58042 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-58042 · Vendor Advisory
• https://git.kernel.org/stable/c/ced8ce3c83a7150c5f5d371a8c332d7bc7f9b66d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-58042 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-58042 · Vendor Advisory
• https://git.kernel.org/stable/c/e1d3422c95f003eba241c176adfe593c33e8a8f6 · Patch
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-58042 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12269 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-58042 · Security Note
• https://git.kernel.org/stable/c/eb2e58484b838fb4e777ee9721bb9e20e6ca971d · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-58042 · Vendor Advisory