CVE-2024-58081

5.5 · MEDIUM

Published Mar 6, 2025 linux CWE-476 EPSS 0.18% (7th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-58081 is a medium-severity vulnerability affecting linux linux_kernel. It was published on March 6, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

clk: mmp2: call pm_genpd_init() only after genpd.name is set

Setting the genpd's struct device's name with dev_set_name() is

happening within pm_genpd_init(). If it remains NULL, things can blow up

later, such as when crafting the devfs hierarchy for the power domain:

Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read

...

Call trace:

strlen from start_creating+0x90/0x138

start_creating from debugfs_create_dir+0x20/0x178

debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144

genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90

genpd_debug_init from do_one_initcall+0x5c/0x244

do_one_initcall from kernel_init_freeable+0x19c/0x1f4

kernel_init_freeable from kernel_init+0x1c/0x12c

kernel_init from ret_from_fork+0x14/0x28

Bisecting tracks this crash back to commit 899f44531fe6 ("pmdomain: core:

Add GENPD_FLAG_DEV_NAME_FW flag"), which exchanges use of

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 6.11.10, < 6.12.14	Affected

References

Ref git.kernel.org/stable/c/763517124e27b07fa300b486d7d13c5d563a215e Ref git.kernel.org/stable/c/e24b15d4704dcb73920c3d18a6157abd18df08c1 Ref git.kernel.org/stable/c/eca01d5911fb34218d10a58d8d9534b758c8fd0a

Frequently Asked Questions

What is CVE-2024-58081?

CVE-2024-58081 is a medium-severity vulnerability affecting linux linux_kernel. It was published on March 6, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-58081?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-58081?

How can CyberStrike help with CVE-2024-58081?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-58081 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719