# scsi: megaraid_sas: Fix for a potential deadlock

CVE record · `CVE-2024-57807`

- **Identifiers:** `CVE-2024-57807`
- **State:** Confirmed
- **Severity:** CVSS 5.5 Medium
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-667](https://cwe.mitre.org/data/definitions/667.html)
- **Tags:** [CWE-667](https://agentprime.io/advisories/tag/cwe-667.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Jan 2025
- **Updated:** 23 May 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Jan 2025, 12:39 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e8c75b5d88f255ac5dcc4a90ae0c300f0b171fe7 to before 78afb9bfad00c4aa58a424111d7edbcab9452f2b` (git)
  - affected: `422fb12054f42c4c82e3959811afd01bc080821a to before f36d024bd15ed356a80dda3ddc46d0a62aa55815` (git)
  - affected: `ae6874ba4b43c5a00065f48599811a09d33b873d to before 3c654998a3e8167a58b6c6fede545fe400a4b554` (git)
  - affected: `ae6874ba4b43c5a00065f48599811a09d33b873d to before edadc693bfcc0f1ea08b8fa041c9361fd042410d` (git)
  - affected: `ae6874ba4b43c5a00065f48599811a09d33b873d to before f50783148ec98a1d38b87422e2ceaf2380b7b606` (git)
  - affected: `ae6874ba4b43c5a00065f48599811a09d33b873d to before 466ca39dbf5d0ba71c16b15c27478a9c7d4022a8` (git)
  - affected: `ae6874ba4b43c5a00065f48599811a09d33b873d to before 50740f4dc78b41dec7c8e39772619d5ba841ddd7` (git)
  - affected: `5f4f65212e42feaee32533448f1c1defdaa6befa` (git)
  - affected: `2262bb7ee19e2d0056ffae84cd1803bd330d06af` (git)
  - affected: `5.4.134 to before 5.4.289` (semver)
  - affected: `5.10.52 to before 5.10.233` (semver)
  - affected: `5.12.19 to before 5.13` (semver)
  - and 1 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.14`
  - unaffected: `before 5.14` (semver)
  - unaffected: `5.4.289 to 5.4.*, inclusive` (semver)
  - unaffected: `5.10.233 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.176 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.123 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.69 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.8 to 6.12.*, inclusive` (semver)
  - unaffected: `6.13 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 5.5 Medium, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`, from ADP (CISA-ADP)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Jan 2025. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2024-57807](https://www.cve.org/CVERecord?id=CVE-2024-57807)
- [NVD: CVE-2024-57807](https://nvd.nist.gov/vuln/detail/CVE-2024-57807)

### References from the CNA

- <https://git.kernel.org/stable/c/78afb9bfad00c4aa58a424111d7edbcab9452f2b>
- <https://git.kernel.org/stable/c/f36d024bd15ed356a80dda3ddc46d0a62aa55815>
- <https://git.kernel.org/stable/c/3c654998a3e8167a58b6c6fede545fe400a4b554>
- <https://git.kernel.org/stable/c/edadc693bfcc0f1ea08b8fa041c9361fd042410d>
- <https://git.kernel.org/stable/c/f50783148ec98a1d38b87422e2ceaf2380b7b606>
- <https://git.kernel.org/stable/c/466ca39dbf5d0ba71c16b15c27478a9c7d4022a8>
- <https://git.kernel.org/stable/c/50740f4dc78b41dec7c8e39772619d5ba841ddd7>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2024-57807>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2024-57807/>. Everything for agents: <https://agentprime.io/llms.txt>.