01 Record

CVE-2024-58017

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 16.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 02:12Z1 YR AGO

Last updated

2026-05-23 15:56Z3 MO AGO

Reserved

2025-02-27

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.2

Document digest

ef5161233522e49fd6443a13120e58f3701e671f0714f5191698c889a6d122de

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 54c14022fa2ba427dc543455c2cf9225903a7174, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < dfb7b179741ee09506dc7719d92f9e1cea01f10e, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < bb8ff054e19fe27f4e5eaac1b05e462894cfe9b1, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 9a6d43844de2479a3ff8d674c3e2a16172e01598, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 4acf6bab775dbd22a9a799030a808a7305e01d63, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 404e5fd918a0b14abec06c7eca128f04c9b98e41, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 4a2c4e7265b8eed83c25d86d702cea06493cab18, e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e to < 3d6f83df8ff2d5de84b50377e4f0d45e25311c7a, 55b2c1ccb82143be1ed9e1922976dbe63917fe68, 089d475a4cdb5848998b3cb37e545413ed054784, 695583334b6b7f82c39ee124edfbfa48145ed571, 3404019d6d0f4c0108b77d44e97e2e39ca937e6f, 4.4.203 to < 4.5, 4.9.203 to < 4.10, 4.14.156 to < 4.15, 4.19.86 to < 4.20, 4.20—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/54c14022fa2ba427dc543455c2cf9225903a7174
git.kernel.orghttps://git.kernel.org/stable/c/dfb7b179741ee09506dc7719d92f9e1cea01f10e
git.kernel.orghttps://git.kernel.org/stable/c/bb8ff054e19fe27f4e5eaac1b05e462894cfe9b1
git.kernel.orghttps://git.kernel.org/stable/c/9a6d43844de2479a3ff8d674c3e2a16172e01598
git.kernel.orghttps://git.kernel.org/stable/c/4acf6bab775dbd22a9a799030a808a7305e01d63
git.kernel.orghttps://git.kernel.org/stable/c/404e5fd918a0b14abec06c7eca128f04c9b98e41
git.kernel.orghttps://git.kernel.org/stable/c/4a2c4e7265b8eed83c25d86d702cea06493cab18
git.kernel.orghttps://git.kernel.org/stable/c/3d6f83df8ff2d5de84b50377e4f0d45e25311c7a
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

01 Record index

CVE-2024-58017

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-58017

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References