01 Record

CVE-2024-57946

virtio-blk: don't keep queue frozen during system suspend

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

virtio-blk: don't keep queue frozen during system suspend

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.17% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 6.4% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-21 12:22Z1 YR AGO

Last updated

2026-05-23 15:56Z3 MO AGO

Reserved

2025-01-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-667Improper LockingClass

Data version

5.2

Document digest

9bfbe4970f46fa97ab875337c319f99547eea76fb3299aa3531c01544cca2bab

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb7bfaea8f5ecd290864f5ae4c69859b89832b4dc to < d738f3215bb4f88911ff4579780a44960c8e0ca5, 5fe446b245ba61ddc924d7db280bcd987c39357a to < 9ca428c6397abaa8c38f5c69133a2299e1efbbf2, 2a52590ac52394540351d8289cc2af0b83cf7d31 to < 6dea8e3de59928974bf157dd0499d3958d744ae4, db48acce75d73dfe51c43d56893cce067b73cf08 to < 9e323f856cf4963120e0e3892a84ef8bd764a0e4, 8946924ff324853df6b7c525a7467d964dfd11c3 to < 12c0ddd6c551c1e438b087f874b4f1223a75f7ea, 4ce6e2db00de8103a0687fb0f65fd17124a51aaa to < 92d5139b91147ab372a17daf5dc27a5b9278e516, 4ce6e2db00de8103a0687fb0f65fd17124a51aaa to < 7678abee0867e6b7fb89aa40f6e9f575f755fb37, 2b5128c714d863cd8d259aa9d87bed2d6aa6a5a8, c67ed40b1b4a66e3a13b21bdfbd0151639da5240, 5.4.270 to < 5.4.289, 5.10.211 to < 5.10.233, 5.15.150 to < 5.15.176, 6.1.80 to < 6.1.123, 6.6.19 to < 6.6.69, 4.19.308 to < 4.20, 6.7.7 to < 6.8, 6.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d738f3215bb4f88911ff4579780a44960c8e0ca5
git.kernel.orghttps://git.kernel.org/stable/c/9ca428c6397abaa8c38f5c69133a2299e1efbbf2
git.kernel.orghttps://git.kernel.org/stable/c/6dea8e3de59928974bf157dd0499d3958d744ae4
git.kernel.orghttps://git.kernel.org/stable/c/9e323f856cf4963120e0e3892a84ef8bd764a0e4
git.kernel.orghttps://git.kernel.org/stable/c/12c0ddd6c551c1e438b087f874b4f1223a75f7ea
git.kernel.orghttps://git.kernel.org/stable/c/92d5139b91147ab372a17daf5dc27a5b9278e516
git.kernel.orghttps://git.kernel.org/stable/c/7678abee0867e6b7fb89aa40f6e9f575f755fb37
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-57946

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-57946

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References