Critical
fou: fix initialization of grc
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Announced Group revision 1
Original source ↗CVE-2024-46865
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-46865
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "231c235d2f7a66f018f172e26ffd47c363f244ef",
"lessThan": "392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e",
"versionType": "git"
},
{
"status": "affected",
"version": "4494bccb52ffda22ce5a1163a776d970e6229e08",
"lessThan": "16ff0895283058b0f96d4fe277aa25ee096f0ea8",
"versionType": "git"
},
{
"status": "affected",
"version": "d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3",
"lessThan": "5d537b8d900514509622ce92330b70d2e581d409",
"versionType": "git"
},
{
"status": "affected",
"version": "1df42be305fe478ded1ee0c1d775f4ece713483b",
"lessThan": "7ae890ee19479eeeb87724cca8430b5cb3660c74",
"versionType": "git"
},
{
"status": "affected",
"version": "c46cd6aaca81040deaea3500ba75126963294bd9",
"lessThan": "aca06c617c83295f0caa486ad608fbef7bdc11e8",
"versionType": "git"
},
{
"status": "affected",
"version": "7e4196935069947d8b70b09c1660b67b067e75cb",
"lessThan": "4c8002277167125078e6b9b90137bdf443ebaa08",
"versionType": "git"
}
],
"programFiles": [
"net/ipv4/fou_core.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.10.226",
"lessThan": "5.10.227",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.167",
"lessThan": "5.15.168",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.110",
"lessThan": "6.1.111",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.51",
"lessThan": "6.6.52",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.10.10",
"lessThan": "6.10.11",
"versionType": "semver"
}
],
"programFiles": [
"net/ipv4/fou_core.c"
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2024-46865
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #26723 · Revision 1
- Added to Heist Feed
- Publisher date