CVE-2024-58085

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/03/2025
Last modified:
12/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tomoyo: don&amp;#39;t emit warning in tomoyo_write_control()<br /> <br /> syzbot is reporting too large allocation warning at tomoyo_write_control(),<br /> for one can write a very very long line without new line character. To fix<br /> this warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,<br /> for practically a valid line should be always shorter than 32KB where the<br /> "too small to fail" memory-allocation rule applies.<br /> <br /> One might try to write a valid line that is longer than 32KB, but such<br /> request will likely fail with -ENOMEM. Therefore, I feel that separately<br /> returning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.<br /> There is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.4.291 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.235 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.179 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.129 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.78 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.3 (excluding)