Orta CVSS 5.5

CVE-2024-38619: Linux Kernel: güvenlik açığı

Yayın: 20 Haziran 2024 10:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,25 (yüzdelik 17)
CWE: CWE-908
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	2.6.16	—	4.19.317
linux-linux-kernel	4.20	—	5.4.279
linux-linux-kernel	5.5	—	5.10.221
linux-linux-kernel	5.11	—	5.15.162
linux-linux-kernel	5.16	—	6.1.95
linux-linux-kernel	6.2	—	6.6.35
linux-linux-kernel	6.7	—	6.9.6
linux-linux-kernel	6.10	6.10	—
linux-linux-kernel	6.10	6.10	—
linux-linux-kernel	6.10	6.10	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları