CVE-2024-57931

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue concerns the Linux kernel, specifically the SELinux module, where unknown extended permissions were not handled properly. When evaluating extended permissions, the kernel will now ignore unknown permissions instead of calling BUG(). This change ensures that future permissions can be added without interfering with older kernels.

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting the use of extended permissions until the update is applied.