CVE-2024-58056

A flaw was found in the Linux kernel's Remote Processor (remoteproc) framework. A local user can trigger this vulnerability to cause a Denial of Service (DoS) during device initialization. If an error occurs prior to identifier allocation, the cleanup handler incorrectly attempts to release an unallocated identifier, resulting in kernel warnings and potential system instability.

This vulnerability is rated as Low severity because it primarily results in a non-fatal kernel warning when an error occurs during remote processor initialization. The issue occurs only under specific hardware driver probe failure conditions and does not enable privilege escalation or memory corruption. Earlier enterprise releases, including Red Hat Enterprise Linux 8 and 9, are not affected as the vulnerable code path is not present in their kernel versions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.