by Kastro CVE-2024-46865
Linux Linux — fou: fix initialization of grc
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Affected
ProductAffectedFixed inSource
Linux231c235d2f7a66f018f172e26ffd47c363f244ef – < 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3eCNA
Linux4494bccb52ffda22ce5a1163a776d970e6229e08 – < 16ff0895283058b0f96d4fe277aa25ee096f0ea816ff0895283058b0f96d4fe277aa25ee096f0ea8CNA
Linuxd7567f098f54cb53ee3cee1c82e3d0ed9698b6b3 – < 5d537b8d900514509622ce92330b70d2e581d4095d537b8d900514509622ce92330b70d2e581d409CNA
Linux1df42be305fe478ded1ee0c1d775f4ece713483b – < 7ae890ee19479eeeb87724cca8430b5cb3660c747ae890ee19479eeeb87724cca8430b5cb3660c74CNA
Linuxc46cd6aaca81040deaea3500ba75126963294bd9 – < aca06c617c83295f0caa486ad608fbef7bdc11e8aca06c617c83295f0caa486ad608fbef7bdc11e8CNA
Linux7e4196935069947d8b70b09c1660b67b067e75cb – < 4c8002277167125078e6b9b90137bdf443ebaa084c8002277167125078e6b9b90137bdf443ebaa08CNA
Linux5.10.226 – < 5.10.2275.10.227CNA
Linux5.15.167 – < 5.15.1685.15.168CNA
Linux6.1.110 – < 6.1.1116.1.111CNA
Linux6.6.51 – < 6.6.526.6.52CNA
Linux6.10.10 – < 6.10.116.10.11CNA
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1V1.1.1siemens-SADP
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial