CVE-2024-58016
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In the Linux kernel, the safesetid module lacked size validation for data written to sysfs. An attacker could send an oversized buffer, triggering a warning in kmalloc and potentially destabilizing the system.
Risk Assessment
The organization is exposed to DoS (denial of service) attacks by deliberately sending large data to the safesetid sysfs interface, potentially causing system crashes or instability.
Recommendation
Immediately update the Linux kernel to a version containing the fix (commit with added buffer size validation in handle_policy_update).
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc. Check the size specified for write buffers before allocating. [PM: subject tweak]