CVE-2024-46844

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46844
In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_line() The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setup_one_line().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/289979d64573f43df1d0e6bc6435de63a0d69cdf Patch
https://git.kernel.org/stable/c/3bedb7ce080690d0d6172db790790c1219bcbdd5 Patch
https://git.kernel.org/stable/c/43f782c27907f306c664b6614fd6f264ac32cce6 Patch
https://git.kernel.org/stable/c/824ac4a5edd3f7494ab1996826c4f47f8ef0f63d Patch
https://git.kernel.org/stable/c/96301fdc2d533a196197c055af875fe33d47ef84 Patch
https://git.kernel.org/stable/c/c8944d449fda9f58c03bd99649b2df09948fc874 Patch
https://git.kernel.org/stable/c/ec5b47a370177d79ae7773858042c107e21f8ecc Patch
https://git.kernel.org/stable/c/fc843d3837ebcb1c16d3768ef3eb55e25d5331f2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 Oct 2024, 14:22

Type Values Removed Values Added
CWE CWE-824
References () https://git.kernel.org/stable/c/289979d64573f43df1d0e6bc6435de63a0d69cdf - () https://git.kernel.org/stable/c/289979d64573f43df1d0e6bc6435de63a0d69cdf - Patch
References () https://git.kernel.org/stable/c/3bedb7ce080690d0d6172db790790c1219bcbdd5 - () https://git.kernel.org/stable/c/3bedb7ce080690d0d6172db790790c1219bcbdd5 - Patch
References () https://git.kernel.org/stable/c/43f782c27907f306c664b6614fd6f264ac32cce6 - () https://git.kernel.org/stable/c/43f782c27907f306c664b6614fd6f264ac32cce6 - Patch
References () https://git.kernel.org/stable/c/824ac4a5edd3f7494ab1996826c4f47f8ef0f63d - () https://git.kernel.org/stable/c/824ac4a5edd3f7494ab1996826c4f47f8ef0f63d - Patch
References () https://git.kernel.org/stable/c/96301fdc2d533a196197c055af875fe33d47ef84 - () https://git.kernel.org/stable/c/96301fdc2d533a196197c055af875fe33d47ef84 - Patch
References () https://git.kernel.org/stable/c/c8944d449fda9f58c03bd99649b2df09948fc874 - () https://git.kernel.org/stable/c/c8944d449fda9f58c03bd99649b2df09948fc874 - Patch
References () https://git.kernel.org/stable/c/ec5b47a370177d79ae7773858042c107e21f8ecc - () https://git.kernel.org/stable/c/ec5b47a370177d79ae7773858042c107e21f8ecc - Patch
References () https://git.kernel.org/stable/c/fc843d3837ebcb1c16d3768ef3eb55e25d5331f2 - () https://git.kernel.org/stable/c/fc843d3837ebcb1c16d3768ef3eb55e25d5331f2 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux

30 Sep 2024, 12:45

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: um: line: always fill *error_out in setup_one_line() El puntero no es inicializado por los llamadores, pero he encontrado casos en los que aún se imprime; inicialícelo en todos los casos posibles en setup_one_line().

27 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-27 13:15

Updated : 2024-10-02 14:22

NVD link : CVE-2024-46844

Mitre link : CVE-2024-46844

CVE.ORG link : CVE-2024-46844

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-824

Access of Uninitialized Pointer