5.5

CVE-2024-57939: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-57939DEBIAN-CVE-2024-57939
Published 21-01-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-57939 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 29 · Related 27
DLA-4076-1DSA-5860-1MGASA-2025-0030MGASA-2025-0032USN-7379-1USN-7381-1

Timeline

  1. 21-01-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix sleeping in invalid context in die() die() can be called in exception handler, and therefore cannot sleep. However, die() takes spinlock_t which can sleep with PREEMPT_RT enabled. That causes the following warning: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 285, name: mutex preempt_count: 110001, expected: 0 RCU nest depth: 0, expected: 0 CPU: 0 UID: 0 PID: 285 Comm: mutex Not tainted 6.12.0-rc7-00022-ge19049cf7d56-dirty #234 Hardware name: riscv-virtio,qemu (DT) Call Trace: dump_backtrace+0x1c/0x24 show_stack+0x2c/0x38 dump_stack_lvl+0x5a/0x72 dump_stack+0x14/0x1c __might_resched+0x130/0x13a rt_spin_lock+0x2a/0x5c die+0x24/0x112 do_trap_insn_illegal+0xa0/0xea _new_vmalloc_restore_context_a0+0xcc/0xd8 Oops - illegal instruction [#1] Switch to use raw_spinlock_t, which does not sleep even with PREEMPT_RT enabled.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu134 products
  • linuxAll versions (No fix recorded) | < 5.15.0-135.146 | < 6.8.0-60.63
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1080.87 | < 6.8.0-1029.31
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < 8c38baa03ac8e18140faf36a3b955d30cad48e74 | ≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < 10c24df2e303f517fab0359392c11b6b1d553f2b | ≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < c21df31fc2a4afc02a6e56511364e9e793ea92ec | ≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < f48f060a4b36b5e96628f6c3fb1540f1e8dedb69 | ≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < 76ab0afcdbe8c9685b589016ee1c0e25fe596707 | ≥ 76d2a0493a17d4c8ecc781366850c3c4f8e1a446, < 6a97f4118ac07cfdc316433f385dbdc12af5025e | 4.15
  • linux_kernel≥ 4.15, < 5.10.234 | ≥ 5.11, ≤ 5.15.177 | ≥ 5.16, ≤ 6.1.125 | ≥ 6.2, ≤ 6.6.72 | ≥ 6.7, ≤ 6.12.10 | 6.13:rc1 | 6.13:rc2 | 6.13:rc3 | 6.13:rc4 | 6.13:rc5 | 6.13:rc6
Debian1 product
  • linux< 6.1.128-1 | < 6.12.10-1

3 vendors · 137 products

References

39 links
Show all 39 references