CVE-2024-58085

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-58085
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-58085.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-58085
Downstream
Related
Published
2025-03-06T16:22:32.761Z
Modified
2026-03-20T12:41:07.229839Z
Summary
tomoyo: don't emit warning in tomoyo_write_control()
Details

In the Linux kernel, the following vulnerability has been resolved:

tomoyo: don't emit warning in tomoyowritecontrol()

syzbot is reporting too large allocation warning at tomoyowritecontrol(), for one can write a very very long line without new line character. To fix this warning, I use _GFPNOWARN rather than checking for KMALLOCMAXSIZE, for practically a valid line should be always shorter than 32KB where the "too small to fail" memory-allocation rule applies.

One might try to write a valid line that is longer than 32KB, but such request will likely fail with -ENOMEM. Therefore, I feel that separately returning -EINVAL when a line is longer than KMALLOCMAXSIZE is redundant. There is no need to distinguish over-32KB and over-KMALLOCMAXSIZE.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58085.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bd03a3e4c9a9df0c6b007045fa7fc8889111a478
Fixed
c67efabddc73171c7771d3ffe4ffa1e503ee533e
Fixed
f6b37b3e12de638753bce79a2858070b9c4a4ad3
Fixed
b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1
Fixed
a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f
Fixed
fe1c021eb03dae0dc9dce55e81f77a60e419a27a
Fixed
c9382f380e8d09209b8e5c0def0545852168be25
Fixed
414705c0303350d139b1dc18f329fe47dfb642dd
Fixed
3df7546fc03b8f004eee0b9e3256369f7d096685

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-58085.json"