CVE-2024-58016: safesetid: check size of policy writes
In the Linux kernel, the following vulnerability has been resolved:
safesetid: check size of policy writes
syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handlepolicyupdate(), triggering a warning in kmalloc.
Check the size specified for write buffers before allocating.
[PM: subject tweak]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58016?
CVE-2024-58016 is classified as high severity due to potential denial of service risks.
How do I fix CVE-2024-58016?
To fix CVE-2024-58016, update your Linux kernel to a version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2024-58016?
CVE-2024-58016 affects various versions of the Linux kernel from 5.1 to 6.12.14.
Can CVE-2024-58016 lead to remote code execution?
CVE-2024-58016 does not directly lead to remote code execution but can lead to system instability.
Is there a workaround for CVE-2024-58016?
There is no effective workaround for CVE-2024-58016; updating to the latest kernel is the recommended mitigation.