CVE-2024-58017
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 190
Summary
CVE-2024-58017 is a vulnerability affecting the Linux kernel that has been addressed. The issue stemmed from a signed integer overflow when defining LOG_BUF_len_MAX. Specifically, shifting 1 << 32 on a 32-bit int caused an integer overflow, resulting in undefined behavior. To mitigate this vulnerability, the developers have introduced a fix by casting 1 to an unsigned 32-bit integer (u32) before performing the shift, ensuring well-defined behavior throughout the system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.