CVE-2024-36015

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan Improper Validation of Array Index pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value. To address this issue, index should be checked after ida_simple_get. When the index value is abnormal, a warning message should be printed, the port should be dropped, and the value should be recorded.

Rincian

Terbit di NVD

29 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-129: Improper Validation of Array Index

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/5d5b24edad1107a2ffa99058f20f6aeeafeb5d39 patch
• https://git.kernel.org/stable/c/65cd017d43f4319a56747d38308b0a24cf57299e patch
• https://git.kernel.org/stable/c/b65d0410b879af0295d22438a4a32012786d152a patch
• https://git.kernel.org/stable/c/b8c6b83cc3adff3ddf403c8c7063fe6d08b2b9d9 patch
• https://git.kernel.org/stable/c/d32caf51379a4d71db03d3d4d7c22d27cdf7f68b patch
• https://git.kernel.org/stable/c/df9329247dbbf00f6057e002139ab3fa529ad828 patch
• https://git.kernel.org/stable/c/ec3468221efec6660ff656e9ebe51ced3520fc57 patch
• https://git.kernel.org/stable/c/fbf740aeb86a4fe82ad158d26d711f2f3be79b3e patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html