CVE-2024-57931

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: ignore unknown extended permissions

When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < f45a77dd24ae9ddb474303ec3975c376bd99fc51; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < 712137b177b45f255ce5687e679d950fcb218256; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < f70e4b9ec69d9a74b84c17767a9a4eda8c901021; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < c79324d42fa48372e0acb306a2761cc642bd4db0; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < c1dbd28a079553de0023e1c938c713efeeee400f; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < efefe36c03a73bb81c0720ce397659a5051b73fa; >= fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a, < 900f83cf376bdaf798b6f5dcb2eae0c822e908b6
LinuxLinux4.3

References

Timeline

Published
Jan 21, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-579325.5In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XCVE-2024-579335.5In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicCVE-2024-579344.7In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READ_ONCE() when accessing fgraph_array[] In __ftrace_retuCVE-2024-579355.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it faiCVE-2024-579365.5In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to CVE-2024-579385.5In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init()CVE-2024-579395.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix sleeping in invalid context in die() die() can be called inCVE-2024-579405.5In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is CVE-2024-579415.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the (non-)cancellation of copy when cache is temporarily disCVE-2024-579425.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix ceph copy to cache on write-begin At the end of netfs_unlocCVE-2024-579437.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writingCVE-2024-579445.5In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: Add NULL check in ads1298_init devm_kasprintf()
CVE-2024-57931: Medium severity, CVSS 5.5 | Vulnix