What is CVE-2024-58001?

CVE-2024-58001 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 3.5 onward and patched in 5.4.291, 5.10.235, 5.15.179 and others. CVE-2024-58001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-58001?

CVE-2024-58001 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-58001?

Yes, CVE-2024-58001 has been patched. Fixed versions include 5.4.291, 5.10.235, 5.15.179 and others. If you are running Linux kernel 3.5 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-58001 actively exploited?

CVE-2024-58001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-58001

Medium

In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle a symlink read error correctly Patch series "Convert ocfs2 to use folios". Mark did a conversion of ocfs2 to use folios and sent it to me as a giant patch for review ;-) So I've redone it as individual patches, and credited Mark for the patches where his code is substantially the same. It's not a bad way to do it; his patch had some bugs and my patches had some bugs. Hopefully all our bugs were different from each other. And hopefully Mark likes all the changes I made to his code! This patch (of 23): If we can't read the buffer, be sure to unlock the page before returning.

Package Linux Kernel

Published 2025-02-27

Last modified 2025-11-03

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 3.5 and later are affected. Fixed in 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.78, 6.12.14, 6.13.3, 6.14 and their respective stable series.

Affected from

≥ 3.5

Fixed in

✓ 5.4.291 5.4.x ✓ 5.10.235 5.10.x ✓ 5.15.179 5.15.x ✓ 6.1.129 6.1.x ✓ 6.6.78 6.6.x ✓ 6.12.14 6.12.x ✓ 6.13.3 6.13.x ✓ 6.14

References

10 total

Kernel Git
https://git.kernel.org/stable/c/2b4c2094da6d84e69b843dd3317902e977bf64bd

Patch
Kernel Git
https://git.kernel.org/stable/c/52a326f93ceb9348264fddf7bab6e345db69e08c

Patch
Kernel Git
https://git.kernel.org/stable/c/5e3b3ec7c3cb5ba5629a766e4f0926db72cf0a1f

Patch
Kernel Git
https://git.kernel.org/stable/c/6e143eb4ab83c24e7ad3e3d8e7daa241d9c38377

Patch
Kernel Git
https://git.kernel.org/stable/c/8aee4184c5b79e486598c15aa80687c77f6f6e6e

Patch

Showing 5 of 10 references View all on NVD

Details

CVE ID CVE-2024-58001

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2025-02-27

Modified 2025-11-03

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-58001?

CVE-2024-58001 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 3.5 onward and has been patched in 5.4.291, 5.10.235, 5.15.179 and others. CVE-2024-58001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-58001?

CVE-2024-58001 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-58001?

Yes. CVE-2024-58001 has been patched. Fixed versions include 5.4.291, 5.10.235, 5.15.179 and others. If you are running Linux kernel 3.5 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-58001 actively exploited?

No. CVE-2024-58001 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.