Loading vulnerability…
CVE-2024-58057 affects the Linux kernel Intel Infrastructure Data Path Function (IDPF) Ethernet driver. IDPF workqueues were CPU-bound, so work enqueued on a heavily contended CPU could be serviced by a kworker starved of CPU time. Delayed completion processing causes degraded network-driver performance, timeouts, and can lead to a system crash. The issue was introduced in Linux kernel 6.7. The fix converts the IDPF workqueues to WQ_UNBOUND, allowing default work submissions to execute on an available CPU in the same NUMA node.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Linux kernel IDPF network-driver workqueue flaw.
A Linux kernel IDPF driver workqueue scheduling issue in which CPU-bound kworkers can be starved by a process monopolizing the selected CPU, causing delayed completions, performance degradation, timeouts, and potential system crashes. The fix converts the IDPF workqueues to unbound workqueues so work can migrate to another CPU in the same NUMA node.
A Linux kernel IDPF network-driver availability vulnerability caused by CPU-bound workqueues. Local resource starvation—such as a process monopolizing CPU0—can delay IDPF work execution, resulting in degradation, timeouts, and potentially a system crash. The fix converts the driver workqueues to unbound workqueues so work can run on another available CPU in the same NUMA node.
A Linux kernel Intel IDPF network-driver workqueue scheduling issue introduced in kernel 6.7. CPU-bound IDPF workqueues could be starved when their selected CPU was monopolized, producing severe completion delays, timeouts, performance degradation, and potentially a system crash. The fix converts the driver workqueues to unbound workqueues so work can be executed on an available CPU in the same NUMA node.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.