Medium 5.5Published Feb 26, 2025

CVE-2024-58017printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

Updated under an hour ago (Oct 26, 2026, 1:00 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior. This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 54c14022fa2ba427dc543455c2cf9225903a7174; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before dfb7b179741ee09506dc7719d92f9e1cea01f10e; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before bb8ff054e19fe27f4e5eaac1b05e462894cfe9b1; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 9a6d43844de2479a3ff8d674c3e2a16172e01598; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 4acf6bab775dbd22a9a799030a808a7305e01d63; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 404e5fd918a0b14abec06c7eca128f04c9b98e41; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 4a2c4e7265b8eed83c25d86d702cea06493cab18; from e6fe3e5b7d16e8f146a4ae7fe481bc6e97acde1e before 3d6f83df8ff2d5de84b50377e4f0d45e25311c7a; and 8 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	before 6.1.129; from 6.2 before 6.6.78; from 6.7 before 6.12.14; from 6.13 before 6.13.3	NVD

References

References

https://git.kernel.org/stable/c/54c14022fa2ba427dc543455c2cf9225903a7174
https://git.kernel.org/stable/c/dfb7b179741ee09506dc7719d92f9e1cea01f10e
https://git.kernel.org/stable/c/bb8ff054e19fe27f4e5eaac1b05e462894cfe9b1
https://git.kernel.org/stable/c/9a6d43844de2479a3ff8d674c3e2a16172e01598	patch
https://git.kernel.org/stable/c/4acf6bab775dbd22a9a799030a808a7305e01d63	patch
https://git.kernel.org/stable/c/404e5fd918a0b14abec06c7eca128f04c9b98e41	patch
https://git.kernel.org/stable/c/4a2c4e7265b8eed83c25d86d702cea06493cab18	patch
https://git.kernel.org/stable/c/3d6f83df8ff2d5de84b50377e4f0d45e25311c7a	patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.