2024-09-27 14:03:19 +00:00
{
"id" : "CVE-2024-46865" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-09-27T13:15:17.820" ,
2024-10-17 16:03:26 +00:00
"lastModified" : "2024-10-17T14:15:13.327" ,
"vulnStatus" : "Modified" ,
2024-09-27 14:03:19 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized."
2024-09-30 14:03:19 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fou: se corrige la inicializaci\u00f3n de grc. Primero se debe inicializar grc. Puede haber una condici\u00f3n en la que si fou es NULL, se ejecutar\u00e1 goto out y se utilizar\u00e1 grc sin inicializar."
2024-09-27 14:03:19 +00:00
}
] ,
2024-10-01 16:06:26 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.1 ,
"baseSeverity" : "HIGH" ,
2024-10-01 16:06:26 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-10-01 16:06:26 +00:00
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.2
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-908"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:5.10.226:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6FF3CC29-3CB0-439D-B47A-358D57871F06"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:5.15.167:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B69DB824-7793-4911-A284-B06E7EFEDD7A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.1.110:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BE9D244D-F8E0-4625-8EE0-5F654BC926C1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.6.51:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C599A8CC-8612-442F-9C8A-A2AC38388756"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.10.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7BDB319B-4374-489F-AF7A-CB5F0B71A038"
}
]
}
]
}
] ,
2024-09-27 14:03:19 +00:00
"references" : [
2024-10-17 16:03:26 +00:00
{
"url" : "https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
} ,
{
"url" : "https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
} ,
2024-09-27 14:03:19 +00:00
{
"url" : "https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08" ,
2024-10-01 16:06:26 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-09-27 14:03:19 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409" ,
2024-10-01 16:06:26 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-09-27 14:03:19 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74" ,
2024-10-01 16:06:26 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-09-27 14:03:19 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8" ,
2024-10-01 16:06:26 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-09-27 14:03:19 +00:00
}
]
}