CVEvulnerability
CVE-2024-41052
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-908
Description
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Init the count variable in collecting hot-reset devices
The count variable is used without initialization, it results in mistakes
in the device counting and crashes the userspace if the get hot reset info
path is triggered.
Affected configurations
• linux linux kernel (>= 6.6.36 < 6.6.41)
• linux linux kernel (>= 6.9.7 < 6.9.10)
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://git.kernel.org/stable/c/5a88a3f67e37e39f933b38ebb4985ba5822e9eca Patch
- https://git.kernel.org/stable/c/f44136b9652291ac1fc39ca67c053ac624d0d11b Patch
- https://git.kernel.org/stable/c/f476dffc52ea70745dcabf63288e770e50ac9ab3 Patch
- https://git.kernel.org/stable/c/5a88a3f67e37e39f933b38ebb4985ba5822e9eca Patch
- https://git.kernel.org/stable/c/f44136b9652291ac1fc39ca67c053ac624d0d11b Patch
- https://git.kernel.org/stable/c/f476dffc52ea70745dcabf63288e770e50ac9ab3 Patch