CVE-2024-57979: pps: Fix a use-after-free

Q: What is the severity of CVE-2024-57979?

CVE-2024-57979 is classified as a high severity vulnerability due to its potential to cause a use-after-free condition in the Linux kernel.

Q: How do I fix CVE-2024-57979?

To fix CVE-2024-57979, ensure that you update your Linux kernel to the latest version that contains the patch addressing this vulnerability.

Q: Which versions of the Linux kernel are affected by CVE-2024-57979?

Specific versions of the Linux kernel prior to the latest updates may be affected, so checking the release notes for your kernel version is recommended.

Q: What impact does CVE-2024-57979 have on my system?

CVE-2024-57979 may lead to system instability or crashes due to the use-after-free issue during operations involving ntpd and gpsd.

Q: Is CVE-2024-57979 exploitable remotely?

CVE-2024-57979 could potentially be exploited remotely if certain conditions are met, making it essential to apply patches promptly.

Published Feb 27, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

pps: Fix a use-after-free

On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit() from gpsd when rebooting:

pps pps1: removed ------------[ cut here ]------------ kobject: '(null)' (00000000db4bec24): is not initialized, yet kobjectput() is being called. WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobjectput+0x120/0x150 CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1 Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : kobjectput+0x120/0x150 lr : kobjectput+0x120/0x150 sp : ffffffc0803d3ae0 x29: ffffffc0803d3ae0 x28: ffffff8042dc9738 x27: 0000000000000001 x26: 0000000000000000 x25: ffffff8042dc9040 x24: ffffff8042dc9440 x23: ffffff80402a4620 x22: ffffff8042ef4bd0 x21: ffffff80405cb600 x20: 000000000008001b x19: ffffff8040b3b6e0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 696e6920746f6e20 x14: 7369203a29343263 x13: 205d303434542020 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kobjectput+0x120/0x150 cdevput+0x20/0x3c fput+0x2c4/0x2d8 fput+0x1c/0x38 taskworkrun+0x70/0xfc doexit+0x2a0/0x924 dogroupexit+0x34/0x90 getsignal+0x7fc/0x8c0 dosignal+0x128/0x13b4 donotifyresume+0xdc/0x160 el0svc+0xd4/0xf8 el0t64synchandler+0x140/0x14c el0t64sync+0x190/0x194 ---[ end trace 0000000000000000 ]---

...followed by more symptoms of corruption, with similar stacks:

refcountt: underflow; use-after-free. kernel BUG at lib/listdebug.c:62! Kernel panic - not syncing: Oops - BUG: Fatal exception

This happens because ppsdevicedestruct() frees the ppsdevice with the embedded cdev immediately after calling cdevdel(), but, as the comment above cdevdel() notes, fops for previously opened cdevs are still callable even after cdevdel() returns. I think this bug has always been there: I can't explain why it suddenly started happening every time I reboot this particular board.

In commit d953e0e837e6 ("pps: Fix a use-after free bug when unregistering a source."), George Spelvin suggested removing the embedded cdev. That seems like the simplest way to fix this, so I've implemented his suggestion, using registerchrdev() with ppsidr becoming the source of truth for which minor corresponds to which device.

But now that ppsidr defines userspace visibility instead of cdevadd(), we need to be sure the pps->dev refcount can't reach zero while userspace can still find it again. So, the idrremove() call moves to ppsunregistercdev(), and ppsidr now holds a reference to pps->dev.

ppscore: source serial1 got cdev (251:1) <...> pps pps1: removed ppscore: unregistering pps1 ppscore: deallocating pps1

Affected Software

231 affected componentsFixes available

Linux Kernel

Microsoft cbl2 kernel 5.15.176.3-3<5.15.180.1-1

5.15.180.1-1

Microsoft cbl2 kernel 5.15.180.1-1<5.15.180.1-1

5.15.180.1-1

Linux Linux kernel>=3.2.40<3.3

Linux Linux kernel>=3.4.87<3.5

Linux Linux kernel>=3.8.1<5.4.291

Linux Linux kernel>=5.5<5.10.235

Linux Linux kernel>=5.11<5.15.179

Linux Linux kernel>=5.16<6.1.129

Linux Linux kernel>=6.2<6.6.76

Linux Linux kernel>=6.7<6.12.13

Linux Linux kernel>=6.13<6.13.2

debian/linux<6.1.129-1

6.1.129-1

debian/linux<6.12.13-1

6.12.13-1

debian/linux<6.12.13-1

6.12.13-1

linux/kernel>=3.9.0<5.4.291

5.4.291

linux/kernel>=5.5.0<5.10.235

5.10.235

linux/kernel>=5.11.0<5.15.179

5.15.179

linux/kernel>=5.16.0<6.1.129

6.1.129

linux/kernel>=6.2.0<6.6.76

6.6.76

linux/kernel>=6.7.0<6.12.13

6.12.13

linux/kernel>=6.13.0<6.13.2

6.13.2

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-oracle*

ubuntu/linux-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1146.156~18.04.1

5.4.0-1146.156~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1151.158~18.04.1

5.4.0-1151.158~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1149.158~18.04.1

5.4.0-1149.158~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-216.236~18.04.1

5.4.0-216.236~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1092.97~18.04.1

5.4.0-1092.97~18.04.1

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1144.154~18.04.1

5.4.0-1144.154~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1129.142~18.04.1

5.4.0-1129.142~18.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-216.236

5.4.0-216.236

ubuntu/linux-aws<5.4.0-1146.156

5.4.0-1146.156

ubuntu/linux-aws-5.15<5.15.0-1084.91~20.04.1

5.15.0-1084.91~20.04.1

ubuntu/linux-azure<5.4.0-1151.158

5.4.0-1151.158

ubuntu/linux-azure-5.15<5.15.0-1089.98~20.04.1

5.15.0-1089.98~20.04.1

ubuntu/linux-bluefield<5.4.0-1105.112

5.4.0-1105.112

ubuntu/linux-gcp<5.4.0-1149.158

5.4.0-1149.158

ubuntu/linux-gcp-5.15<5.15.0-1083.92~20.04.1

5.15.0-1083.92~20.04.1

ubuntu/linux-ibm<5.4.0-1092.97

5.4.0-1092.97

ubuntu/linux-ibm-5.15<5.15.0-1076.79~20.04.1

5.15.0-1076.79~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1079.85~20.04.1

5.15.0-1079.85~20.04.1

ubuntu/linux-kvm<5.4.0-1133.142

5.4.0-1133.142

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-140.150~20.04.1

5.15.0-140.150~20.04.1

ubuntu/linux-oracle<5.4.0-1144.154

5.4.0-1144.154

ubuntu/linux-oracle-5.15<5.15.0-1081.87~20.04.1

5.15.0-1081.87~20.04.1

ubuntu/linux-raspi<5.4.0-1129.142

5.4.0-1129.142

ubuntu/linux-riscv-5.15<5.15.0-1079.83~20.04.1

5.15.0-1079.83~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1064.68

5.4.0-1064.68

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-142.152~20.04.1

5.15.0-142.152~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-iot<5.4.0-1051.54

5.4.0-1051.54

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1039.39~20.04.1

5.15.0-1039.39~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1146.156+fips1

5.4.0-1146.156+fips1

ubuntu/linux-azure-fips<5.4.0-1151.158+fips1

5.4.0-1151.158+fips1

ubuntu/linux-fips<5.4.0-1120.130

5.4.0-1120.130

ubuntu/linux-gcp-fips<5.4.0-1149.158+fips1

5.4.0-1149.158+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-140.150

5.15.0-140.150

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1084.91

5.15.0-1084.91

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1032.34~22.04.1

6.8.0-1032.34~22.04.1

ubuntu/linux-azure<5.15.0-1089.98

5.15.0-1089.98

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1034.39~22.04.1

6.8.0-1034.39~22.04.1

ubuntu/linux-azure-fde<5.15.0-1089.98.1

5.15.0-1089.98.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1083.92

5.15.0-1083.92

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1033.35~22.04.1

6.8.0-1033.35~22.04.1

ubuntu/linux-gke<5.15.0-1081.87

5.15.0-1081.87

ubuntu/linux-gkeop<5.15.0-1066.74

5.15.0-1066.74

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-64.67~22.04.1

6.8.0-64.67~22.04.1

ubuntu/linux-ibm<5.15.0-1076.79

5.15.0-1076.79

ubuntu/linux-ibm-6.8<6.8.0-1029.29~22.04.1

6.8.0-1029.29~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1079.85

5.15.0-1079.85

ubuntu/linux-kvm<5.15.0-1080.85

5.15.0-1080.85

ubuntu/linux-lowlatency<5.15.0-140.150

5.15.0-140.150

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-64.67.1~22.04.1

6.8.0-64.67.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1078.79

5.15.0-1078.79

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1031.34~22.04.1

6.8.0-1031.34~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1037.37

5.15.0-1037.37

ubuntu/linux-nvidia-tegra-igx<5.15.0-1026.26

5.15.0-1026.26

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1081.87

5.15.0-1081.87

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1029.30~22.04.1

6.8.0-1029.30~22.04.1

ubuntu/linux-raspi<5.15.0-1078.81

5.15.0-1078.81

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-64.67~22.04.1

6.8.0-64.67~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1050.54

5.15.0-1050.54

ubuntu/linux-bluefield<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-intel-iot-realtime<5.15.0-1077.79

5.15.0-1077.79

ubuntu/linux-realtime<5.15.0-1084.93

5.15.0-1084.93

ubuntu/linux-realtime-6.8<6.8.1-1025.26~22.04.1

6.8.1-1025.26~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1084.91+fips1

5.15.0-1084.91+fips1

ubuntu/linux-azure-fips<5.15.0-1089.98+fips1

5.15.0-1089.98+fips1

ubuntu/linux-fips<5.15.0-140.150+fips1

5.15.0-140.150+fips1

ubuntu/linux-gcp-fips<5.15.0-1083.92+fips1

5.15.0-1083.92+fips1

ubuntu/linux<6.8.0-64.67

6.8.0-64.67

ubuntu/linux-aws<6.8.0-1032.34

6.8.0-1032.34

ubuntu/linux-azure<6.8.0-1034.39

6.8.0-1034.39

ubuntu/linux-azure-6.11<6.11.0-1015.15~24.04.1

6.11.0-1015.15~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1022.23

6.8.0-1022.23

ubuntu/linux-gcp<6.8.0-1033.35

6.8.0-1033.35

ubuntu/linux-gcp-6.11<6.11.0-1015.15~24.04.1

6.11.0-1015.15~24.04.1

ubuntu/linux-gke<6.8.0-1028.32

6.8.0-1028.32

ubuntu/linux-gkeop<6.8.0-1015.17

6.8.0-1015.17

ubuntu/linux-hwe-6.11<6.11.0-26.26~24.04.1

6.11.0-26.26~24.04.1

ubuntu/linux-ibm<6.8.0-1029.29

6.8.0-1029.29

ubuntu/linux-lowlatency<6.8.0-64.67.1

6.8.0-64.67.1

ubuntu/linux-lowlatency-hwe-6.11<6.11.0-1014.15~24.04.1

6.11.0-1014.15~24.04.1

ubuntu/linux-nvidia<6.8.0-1031.34

6.8.0-1031.34

ubuntu/linux-nvidia-6.11<6.11.0-1010.10

6.11.0-1010.10

ubuntu/linux-nvidia-lowlatency<6.8.0-1031.34.1

6.8.0-1031.34.1

ubuntu/linux-nvidia-tegra<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-oem-6.11<6.11.0-1022.22

6.11.0-1022.22

ubuntu/linux-oem-6.8<6.8.0-1031.31

6.8.0-1031.31

ubuntu/linux-oracle<6.8.0-1029.30

6.8.0-1029.30

ubuntu/linux-raspi<6.8.0-1031.35

6.8.0-1031.35

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2026.27

6.8.0-2026.27

ubuntu/linux-realtime<6.8.1-1025.26

6.8.1-1025.26

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.180.1-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.129-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.13-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.4.291
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.235
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.179
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.129
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.76
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.12.13
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.13.2
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1146.156~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.158~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1149.158~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-216.236~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1092.97~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1144.154~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.142~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-216.236
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1146.156
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.158
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1105.112
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1149.158
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1092.97
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.79~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.85~20.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1133.142
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1144.154
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.142
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.83~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1064.68
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1051.54
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39~20.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1146.156+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.158+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1120.130
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1149.158+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.34~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1034.39~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1033.35~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.79
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.29~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.85
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.85
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.79
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.34~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1037.37
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.26
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.30~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.81
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.54
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.79
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.93
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1025.26~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.91+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.98+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-140.150+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.34
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1034.39
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.23
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1033.35
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1028.32
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1015.17
Upgrade
Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-26.26~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.29
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1014.15~24.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.34
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1010.10
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.34.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1022.22
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.31
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.30
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.35
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2026.27
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1025.26
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1

Event History

Feb 27, 2025

CVE Published

via MITRE·02:07 AM

Data Sourced

via MITRE·02:07 AM

DescriptionSeverity

Data Sourced

via OSV·02:07 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·02:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via Red Hat·03:03 AM

DescriptionSeverityAffected Software

May 5, 2025

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·07:00 AM

Affected Software

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-57979?

CVE-2024-57979 is classified as a high severity vulnerability due to its potential to cause a use-after-free condition in the Linux kernel.

How do I fix CVE-2024-57979?

To fix CVE-2024-57979, ensure that you update your Linux kernel to the latest version that contains the patch addressing this vulnerability.

Which versions of the Linux kernel are affected by CVE-2024-57979?

Specific versions of the Linux kernel prior to the latest updates may be affected, so checking the release notes for your kernel version is recommended.

What impact does CVE-2024-57979 have on my system?

CVE-2024-57979 may lead to system instability or crashes due to the use-after-free issue during operations involving ntpd and gpsd.

Is CVE-2024-57979 exploitable remotely?

CVE-2024-57979 could potentially be exploited remotely if certain conditions are met, making it essential to apply patches promptly.

CVE-2024-57979: pps: Fix a use-after-free

Affected Software

Remediation

Event History

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-57979?

How do I fix CVE-2024-57979?

Which versions of the Linux kernel are affected by CVE-2024-57979?

What impact does CVE-2024-57979 have on my system?

Is CVE-2024-57979 exploitable remotely?

Company

Resources

Contact