CVE-2024-46865
Oct. 17, 2024, 2:15 p.m.
Tags
CVSS Score
Products Impacted
| Vendor | Product | Versions |
|---|---|---|
| linux |
|
|
Description
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Weaknesses
CWE-908
Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
CWE ID: 908Date
Published: Sept. 27, 2024, 1:15 p.m.
Last Modified: Oct. 17, 2024, 2:15 p.m.
Source
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CPEs
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| o | linux | linux_kernel | 5.10.226 | / | / | / | / | / | / | / |
| o | linux | linux_kernel | 5.15.167 | / | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.1.110 | / | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.6.51 | / | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10.10 | / | / | / | / | / | / | / |
CVSS Data
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
Exploitability Score
Impact Score
Base Severity
HIGHCVSS Vector String
The CVSS vector string provides an in-depth view of the vulnerability metrics.
View Vector StringCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67