CVE-2024-57982 xfrm: state: fix out-of-bounds read during lookup

🗓️ 27 Feb 2025 02:07:08Reported by LinuxType

Vulnerability CVE-2024-57982 fixed parallel out-of-bounds read in Linux kernel xfrm state lookup.

Reporter	Title	Published	Views	Family All 195
AstraLinux	Astra Linux - уязвимость в linux-6.12	16 Jun 202511:28	–	astralinux
CBLMariner	CVE-2024-57982 affecting package kernel for versions less than 6.6.121.1-1	9 Feb 202623:37	–	cbl_mariner
Circl	CVE-2024-57982	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	27 Feb 202500:00	–	cnnvd
CVE	CVE-2024-57982	27 Feb 202502:07	–	cve
Debian CVE	CVE-2024-57982	27 Feb 202502:07	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	17 Jul 202500:00	–	oraclelinux
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1826)	21 Jul 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1827)	21 Jul 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1931)	13 Aug 202500:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/xfrm/xfrm_state.c"
    ],
    "versions": [
      {
        "version": "c2f672fc94642bae96821a393f342edcfa9794a6",
        "lessThan": "b86dc510308d7a8955f3f47a4fea4bef887653e4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f672fc94642bae96821a393f342edcfa9794a6",
        "lessThan": "a16871c7832ea6435abb6e0b58289ae7dcb7e4fc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f672fc94642bae96821a393f342edcfa9794a6",
        "lessThan": "dd4c2a174994238d55ab54da2545543d36f4e0d0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f672fc94642bae96821a393f342edcfa9794a6",
        "lessThan": "e952837f3ddb0ff726d5b582aa1aad9aa38d024d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/xfrm/xfrm_state.c"
    ],
    "versions": [
      {
        "version": "4.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.9",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.120",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.13",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.13.2",
        "lessThanOrEqual": "6.13.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.14",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/b86dc510308d7a8955f3f47a4fea4bef887653e4
git	www.git.kernel.org/stable/c/dd4c2a174994238d55ab54da2545543d36f4e0d0
git	www.git.kernel.org/stable/c/a16871c7832ea6435abb6e0b58289ae7dcb7e4fc
git	www.git.kernel.org/stable/c/e952837f3ddb0ff726d5b582aa1aad9aa38d024d

11 May 2026 21:01Current

EPSS0.0001