CVE-2024-41052

Published: Jul 29, 2024Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count variable is used without initialization, it results in mistakes in the device counting and crashes the userspace if the get hot reset info path is triggered.

Affected (2)

Products: Linux: Linux Kernel

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.6.36 to 6.6.41
Linux Linux Kernel	From 6.9.7 to 6.9.10

Related CWEs

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

References (6)

https://git.kernel.org/stable/c/5a88a3f67e37e39f933b38ebb4985ba5822e9eca

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/f44136b9652291ac1fc39ca67c053ac624d0d11b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/f476dffc52ea70745dcabf63288e770e50ac9ab3

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/5a88a3f67e37e39f933b38ebb4985ba5822e9eca

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/f44136b9652291ac1fc39ca67c053ac624d0d11b

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/f476dffc52ea70745dcabf63288e770e50ac9ab3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.