CVEvulnerability
CVE-2024-57931
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-21
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
selinux: ignore unknown extended permissions
When evaluating extended permissions, ignore unknown permissions instead
of calling BUG(). This commit ensures that future permissions can be
added without interfering with older kernels.
Affected configurations
• linux linux kernel (>= 4.3 < 5.4.289)
• linux linux kernel (>= 5.5 < 5.10.233)
• linux linux kernel (>= 5.11 < 5.15.176)
• linux linux kernel (>= 5.16 < 6.1.124)
• linux linux kernel (>= 6.2 < 6.6.70)
• linux linux kernel (>= 6.7 < 6.12.9)
• linux linux kernel 6.13
References
- https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256 Patch
- https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6 Patch
- https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f Patch
- https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0 Patch
- https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa Patch
- https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51 Patch
- https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html lists.debian.org