CVE-2024-57931

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57931
In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256 Patch
https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6 Patch
https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f Patch
https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0 Patch
https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa Patch
https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51 Patch
https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021 Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
History

03 Nov 2025, 21:18

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html -
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html -

15 Oct 2025, 13:52

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256 - () https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256 - Patch
References () https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6 - () https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6 - Patch
References () https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f - () https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f - Patch
References () https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0 - () https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0 - Patch
References () https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa - () https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa - Patch
References () https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51 - () https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51 - Patch
References () https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021 - () https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: selinux: ignorar permisos extendidos desconocidos Al evaluar permisos extendidos, ignorar permisos desconocidos en lugar de llamar a BUG(). Esta confirmación garantiza que se puedan agregar permisos futuros sin interferir con kernels más antiguos.
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*

21 Jan 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-21 12:15

Updated : 2025-11-03 21:18

NVD link : CVE-2024-57931

Mitre link : CVE-2024-57931

CVE.ORG link : CVE-2024-57931

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo