Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2024-57807

scsi: megaraid_sas: Fix for a potential deadlock

CVSS 5.5 MediumEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 11 Jan 2025, 12:39 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e8c75b5d88f255ac5dcc4a90ae0c300f0b171fe7 to before 78afb9bfad00c4aa58a424111d7edbcab9452f2b git
  • affected 422fb12054f42c4c82e3959811afd01bc080821a to before f36d024bd15ed356a80dda3ddc46d0a62aa55815 git
  • affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 3c654998a3e8167a58b6c6fede545fe400a4b554 git
  • affected ae6874ba4b43c5a00065f48599811a09d33b873d to before edadc693bfcc0f1ea08b8fa041c9361fd042410d git
  • affected ae6874ba4b43c5a00065f48599811a09d33b873d to before f50783148ec98a1d38b87422e2ceaf2380b7b606 git
  • affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 466ca39dbf5d0ba71c16b15c27478a9c7d4022a8 git
  • affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 50740f4dc78b41dec7c8e39772619d5ba841ddd7 git
  • affected 5f4f65212e42feaee32533448f1c1defdaa6befa git
  • affected 2262bb7ee19e2d0056ffae84cd1803bd330d06af git
  • affected 5.4.134 to before 5.4.289 semver
  • affected 5.10.52 to before 5.10.233 semver
  • affected 5.12.19 to before 5.13 semver
  • and 1 more
Other versions: unaffected
Linux Linux
  • affected 5.14
  • unaffected before 5.14 semver
  • unaffected 5.4.289 to 5.4.*, inclusive semver
  • unaffected 5.10.233 to 5.10.*, inclusive semver
  • unaffected 5.15.176 to 5.15.*, inclusive semver
  • unaffected 6.1.123 to 6.1.*, inclusive semver
  • unaffected 6.6.69 to 6.6.*, inclusive semver
  • unaffected 6.12.8 to 6.12.*, inclusive semver
  • unaffected 6.13 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2024-57807
CNA
Linux
Weakness (CWE)
CWE-667
Tags
Published
11 Jan 2025
Updated
23 May 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.5 Medium 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H ADP (CISA-ADP)
  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Jan 2025. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.