Loading vulnerability…
CVE-2024-58057 is a Linux kernel vulnerability in the Intel Infrastructure Data Path Function (IDPF) Ethernet driver. IDPF workqueues were bound to the CPU on which work was enqueued. If that CPU is monopolized by another process, the associated kworker can be starved, substantially delaying IDPF work completion. The resulting delays can degrade network-driver performance, cause timeouts, and ultimately crash the system. The issue was introduced in Linux kernel 6.7.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Linux kernel IDPF workqueue handling issue.
Linux kernel IDPF network-driver workqueue flaw.
A Linux kernel IDPF driver workqueue scheduling issue in which CPU-bound kworkers can be starved by a process monopolizing the selected CPU, causing delayed completions, performance degradation, timeouts, and potential system crashes. The fix converts the IDPF workqueues to unbound workqueues so work can migrate to another CPU in the same NUMA node.
A Linux kernel IDPF network-driver availability vulnerability caused by CPU-bound workqueues. Local resource starvation—such as a process monopolizing CPU0—can delay IDPF work execution, resulting in degradation, timeouts, and potentially a system crash. The fix converts the driver workqueues to unbound workqueues so work can run on another available CPU in the same NUMA node.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.