Skip to content
Heist/ feed
Back to feed
UnratedFix available

selinux: ignore unknown extended permissions

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.10.233, 5.15.176, 5.4.289, 6.1.124, 6.12.9, 6.6.70
CVEs
CVE-2024-57931
Confirmed fixed CVEs
Not specified
Updated in this feed
5 Nov 2026, 03:17 UTC · Revision 1

Source evidence

selinux: ignore unknown extended permissions

core-osv · Original source

Published 21 Jan 2025, 12:01 UTC

In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.

osv:CVE-2024-57931

Kernel

Fixed versions: 5.4.289, 5.10.233, 5.15.176, 6.1.124, 6.6.70, 6.12.9

Complete source record
{
  "id": "c192feadb19c9626b15c66ca1391f0e36adde851f37d2a610d759aa50e31c37e",
  "url": "https://osv.dev/vulnerability/CVE-2024-57931",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "selinux: ignore unknown extended permissions",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.",
    "evidence": "osv:CVE-2024-57931",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.289",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.233",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.176",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.124",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.70",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.9",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-57931",
      "aliases": [
        "CVE-2024-57931"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a"
                },
                {
                  "fixed": "f45a77dd24ae9ddb474303ec3975c376bd99fc51"
                },
                {
                  "fixed": "712137b177b45f255ce5687e679d950fcb218256"
                },
                {
                  "fixed": "f70e4b9ec69d9a74b84c17767a9a4eda8c901021"
                },
                {
                  "fixed": "c79324d42fa48372e0acb306a2761cc642bd4db0"
                },
                {
                  "fixed": "c1dbd28a079553de0023e1c938c713efeeee400f"
                },
                {
                  "fixed": "efefe36c03a73bb81c0720ce397659a5051b73fa"
                },
                {
                  "fixed": "900f83cf376bdaf798b6f5dcb2eae0c822e908b6"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57931.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.3.0"
                },
                {
                  "fixed": "5.4.289"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.233"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.176"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.124"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.70"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.9"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57931.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:42.278374815Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256",
        "https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6",
        "https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f",
        "https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0",
        "https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa",
        "https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51",
        "https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57931.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-57931",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57931.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-57931",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 509787,
  "published_at": "2025-01-21T12:01:28.539+00:00"
}