PT-2025-9937 · Linux+6 · Linux Kernel+6
Published
2024-11-22
·
Updated
2026-04-20
·
CVE-2024-58056
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the version where the fix for the remoteproc core issue is included
Description
A vulnerability in the Linux kernel's remoteproc core has been identified. The issue arises in the rproc alloc() function when an error occurs before ida alloc is called, leading to the rproc type release() function being called with an uninitialized rproc->index. This results in a warning when ida free is called for an unallocated id. The vulnerability is related to the
rproc alloc() function and the rproc type release() function, specifically the ida free() call.Recommendations
For Linux kernel versions prior to the fixed version, consider applying the patch that fixes the remoteproc core issue to prevent the ida free call while not allocated.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu