CVE-2024-52332

Katalog CVE

CVSS 7.1 · High EPSS 0,25%

Kerentanan Out-of-bounds Read pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.

Rincian

Terbit di NVD

11 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29 patch
• https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36 patch
• https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484 patch
• https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54 patch
• https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f patch
• https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3 patch
• https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html