CVE-2024-58056: Linux kernel · remoteproc: core: Fix ida_free call while not allocated
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 10 Nov 2026, 14:48 UTC
Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 6 Mar 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
AI-suggested
A fix is available that calls ida_alloc earlier in the rproc_alloc() function to ensure rproc->index is properly set before ida_free is called. Users should apply the updated Linux kernel version containing this fix once released. No additional mitigation is indicated.
Description
A flaw in the Linux kernel's remoteproc core was fixed where an ida_free call could be made on an unallocated ID, causing a warning and potential instability. This occurs in the rproc_alloc() function when an error triggers device release before ida_alloc is called, leaving rproc->index incorrectly set. The fix involves calling ida_alloc earlier to ensure proper initialization.
References
- git.kernel.org/stable/c/2cf54928e7e32362215c69b68a6a53d110323bf3 (opens in a new tab)
- git.kernel.org/stable/c/b32d60a852bb3952886625d0c3b1c9a88c3ceb7c (opens in a new tab)
- git.kernel.org/stable/c/f2013d19b7704cd723ab42664b8d9408ea8cc77c (opens in a new tab)
- git.kernel.org/stable/c/e9efd9fa4679803fe23188d7b47119cf7bc2de6f (opens in a new tab)
- git.kernel.org/stable/c/7378aeb664e5ebc396950b36a1f2dedf5aabec20 (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/03/msg00028.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)