CVE-2024-58078

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-58078
In the Linux kernel, the following vulnerability has been resolved: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors misc_minor_alloc was allocating id using ida for minor only in case of MISC_DYNAMIC_MINOR but misc_minor_free was always freeing ids using ida_free causing a mismatch and following warn: > > WARNING: CPU: 0 PID: 159 at lib/idr.c:525 ida_free+0x3e0/0x41f > > ida_free called for id=127 which is not allocated. > > <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< ... > > [<60941eb4>] ida_free+0x3e0/0x41f > > [<605ac993>] misc_minor_free+0x3e/0xbc > > [<605acb82>] misc_deregister+0x171/0x1b3 misc_minor_alloc is changed to allocate id from ida for all minors falling in the range of dynamic/ misc dynamic minors

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3df72111c39f7e4c5029c9ff720b56ec2e05b764 Patch
https://git.kernel.org/stable/c/6635332d246d7db89b90e145f2bf937406cecaf0 Patch
https://git.kernel.org/stable/c/6d04d2b554b14ae6c428a9c60b6c85f1e5c89f68 Patch
https://git.kernel.org/stable/c/8b4120b3e060e137eaa8dc76a1c40401088336e5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Oct 2025, 16:31

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: misc_minor_alloc para usar ida para todos los menores dinámicos/misc dinámicos misc_minor_alloc asignaba id usando ida para menores solo en el caso de MISC_DYNAMIC_MINOR pero misc_minor_free siempre liberaba id usando ida_free, lo que causaba una falta de coincidencia y la siguiente advertencia: &gt; &gt; WARNING: CPU: 0 PID: 159 at lib/idr.c:525 ida_free+0x3e0/0x41f &gt; &gt; ida_free called for id=127 which is not allocated. &gt; &gt; &lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt; ... &gt; &gt; [&lt;60941eb4&gt;] ida_free+0x3e0/0x41f &gt; &gt; [&lt;605ac993&gt;] misc_minor_free+0x3e/0xbc &gt; &gt; [&lt;605acb82&gt;] misc_deregister+0x171/0x1b3 misc_minor_alloc Se cambió misc_minor_alloc para asignar id de ida para todos los menores que caen en el rango de menores dinámicos/misc dinámicos
References () https://git.kernel.org/stable/c/3df72111c39f7e4c5029c9ff720b56ec2e05b764 - () https://git.kernel.org/stable/c/3df72111c39f7e4c5029c9ff720b56ec2e05b764 - Patch
References () https://git.kernel.org/stable/c/6635332d246d7db89b90e145f2bf937406cecaf0 - () https://git.kernel.org/stable/c/6635332d246d7db89b90e145f2bf937406cecaf0 - Patch
References () https://git.kernel.org/stable/c/6d04d2b554b14ae6c428a9c60b6c85f1e5c89f68 - () https://git.kernel.org/stable/c/6d04d2b554b14ae6c428a9c60b6c85f1e5c89f68 - Patch
References () https://git.kernel.org/stable/c/8b4120b3e060e137eaa8dc76a1c40401088336e5 - () https://git.kernel.org/stable/c/8b4120b3e060e137eaa8dc76a1c40401088336e5 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo

06 Mar 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-06 17:15

Updated : 2025-10-31 16:31

NVD link : CVE-2024-58078

Mitre link : CVE-2024-58078

CVE.ORG link : CVE-2024-58078

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo