Medium 5.5Published Mar 6, 2025

CVE-2024-58085tomoyo: don't emit warning in tomoyo_write_control()

Updated under an hour ago (Oct 27, 2026, 10:00 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control() syzbot is reporting too large allocation warning at tomoyo_write_control(), for one can write a very very long line without new line character. To fix this warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE, for practically a valid line should be always shorter than 32KB where the "too small to fail" memory-allocation rule applies. One might try to write a valid line that is longer than 32KB, but such request will likely fail with -ENOMEM. Therefore, I feel that separately returning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant. There is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before c67efabddc73171c7771d3ffe4ffa1e503ee533e; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before f6b37b3e12de638753bce79a2858070b9c4a4ad3; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before fe1c021eb03dae0dc9dce55e81f77a60e419a27a; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before c9382f380e8d09209b8e5c0def0545852168be25; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before 414705c0303350d139b1dc18f329fe47dfb642dd; from bd03a3e4c9a9df0c6b007045fa7fc8889111a478 before 3df7546fc03b8f004eee0b9e3256369f7d096685	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	before 5.4.291; from 5.5 before 5.10.235; from 5.11 before 5.15.179; from 5.16 before 6.1.129; from 6.2 before 6.6.78; from 6.7 before 6.12.14; from 6.13 before 6.13.3	NVD

References

References

https://git.kernel.org/stable/c/c67efabddc73171c7771d3ffe4ffa1e503ee533e	patch
https://git.kernel.org/stable/c/f6b37b3e12de638753bce79a2858070b9c4a4ad3	patch
https://git.kernel.org/stable/c/b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1	patch
https://git.kernel.org/stable/c/a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f	patch
https://git.kernel.org/stable/c/fe1c021eb03dae0dc9dce55e81f77a60e419a27a	patch
https://git.kernel.org/stable/c/c9382f380e8d09209b8e5c0def0545852168be25	patch
https://git.kernel.org/stable/c/414705c0303350d139b1dc18f329fe47dfb642dd	patch
https://git.kernel.org/stable/c/3df7546fc03b8f004eee0b9e3256369f7d096685	patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.