5.5

CVE-2024-56583: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-56583DEBIAN-CVE-2024-56583
Published 27-12-2024Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2024-56583 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 13.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 14
MGASA-2025-0030MGASA-2025-0032USN-7379-1USN-7381-1USN-7382-1USN-7449-1

Timeline

  1. 27-12-2024
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix warning in migrate_enable for boosted tasks When running the following command: while true; do stress-ng --cyclic 30 --timeout 30s --minimize --quiet done a warning is eventually triggered: WARNING: CPU: 43 PID: 2848 at kernel/sched/deadline.c:794 setup_new_dl_entity+0x13e/0x180 ... Call Trace: <TASK> ? show_trace_log_lvl+0x1c4/0x2df ? enqueue_dl_entity+0x631/0x6e0 ? setup_new_dl_entity+0x13e/0x180 ? __warn+0x7e/0xd0 ? report_bug+0x11a/0x1a0 ? handle_bug+0x3c/0x70 ? exc_invalid_op+0x14/0x70 ? asm_exc_invalid_op+0x16/0x20 enqueue_dl_entity+0x631/0x6e0 enqueue_task_dl+0x7d/0x120 __do_set_cpus_allowed+0xe3/0x280 __set_cpus_allowed_ptr_locked+0x140/0x1d0 __set_cpus_allowed_ptr+0x54/0xa0 migrate_enable+0x7e/0x150 rt_spin_unlock+0x1c/0x90 group_send_sig_info+0xf7/0x1a0 ? kill_pid_info+0x1f/0x1d0 kill_pid_info+0x78/0x1d0 kill_proc_info+0x5b/0x110 __x64_sys_kill+0x93/0xc0 do_syscall_64+0x5c/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 RIP: 0033:0x7f0dab31f92b This warning occurs because set_cpus_allowed dequeues and enqueues tasks with the ENQUEUE_RESTORE flag set. If the task is boosted, the warning is triggered. A boosted task already had its parameters set by rt_mutex_setprio, and a new call to setup_new_dl_entity is unnecessary, hence the WARN_ON call. Check if we are requeueing a boosted task and avoid calling setup_new_dl_entity if that's the case.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu135 products
  • linuxAll versions (No fix recorded) | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 295d6d5e373607729bcc8182c25afe964655714f, < b600d30402854415aa57548a6b53dc6478f65517 | ≥ 295d6d5e373607729bcc8182c25afe964655714f, < e41074904d9ed3fe582d6e544c77b40c22043c82 | ≥ 295d6d5e373607729bcc8182c25afe964655714f, < 0664e2c311b9fa43b33e3e81429cd0c2d7f9c638 | fd8cb2e71cdd8e814cbdadddd0d0e6e3d49eaa2c | ≥ 4.14.70, < 4.15 | 4.15
  • linux_kernel≥ 4.14.70, < 6.6.66 | ≥ 6.7, < 6.12.5 | 6.13:rc1 | 6.13:rc2
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.5-1

3 vendors · 138 products

References

21 links
Show all 21 references