CVE catalog

CVE-2024-54159

stalld-1.19.8-1.1 on GA media

[CVE catalog]

Severity
Medium · CVSS 4.1CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.18% · Oct 25, 2026

This update for stalld fixes the following issues: Update to 1.19.8. Check https://gitlab.com/rt-linux-tools/stalld/-/releases for the full list of changes. Changes since 1.19.6: * Address CVE-2024-54159, which is a DoS issue with the way throttlectl.sh uses temp files (bsc#1230327) * Fix a compilation issue with a prototype mis-match in stalld.h and utils.c for cleanup_regex() * Workaround missing sched_getattr() export from glibc * Fix a problem with parsing /sys/kernel/debug/sched/debug on aarch64 - Place the original scheduling values in a root-owned directory in /run/stalld, not into the public /tmp directory (bsc#1230327).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susestalldlinux micro 6.11.19.8-slfo.1.1_1.1fixed
Opensusestalldtumbleweed1.19.8-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susestalldrpmlinux micro 6.11.19.8-slfo.1.1_1.1Not reportedSUSE-SU-2025:20468-1Not reported
Opensusestalldrpmtumbleweed1.19.8-1.1Not reportedOPENSUSE-SU-2025:14886-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [stalld]Fixed

    Source package: [stalld]

    Details (1)

    • 1.21.1-1.7 · x86_64 · tumbleweed

      Fixed · Fixed: 1.19.8-1.1

      pypi · stalld · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]