PT-2025-9962 · Linux+3 · Linux Kernel+3

Lubomir Rintel · Published 2025-01-08 · Updated 2026-04-20 · CVE-2024-58081

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the initialization of the power management domain (genpd). The issue arises when the genpd struct's device name is not set before calling pm genpd init(), leading to a potential NULL pointer dereference. This can cause a kernel crash when creating the devfs hierarchy for the power domain. The crash is characterized by an "Unable to handle kernel NULL pointer dereference" error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-12207

CVE-2024-58081

USN-7493-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 326

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58081.json · Exploit
• https://ubuntu.com/security/CVE-2025-21792 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21689 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-58081 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21666 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7651-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21859 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://git.kernel.org/stable/c/e24b15d4704dcb73920c3d18a6157abd18df08c1 · Patch