Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-38381HistoryJun 21, 2024 - 11:15 a.m.
CVE-2024-38381
2024-06-2111:15:10
Debian Security Bug Tracker
security-tracker.debian.org
1
linux kernel
vulnerability
cve-2024-38381
resolved
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | <= 6.1.76-1 | linux_6.1.76-1_all.deb |
| Debian | 11 | all | linux | <= 5.10.209-2 | linux_5.10.209-2_all.deb |
| Debian | 10 | all | linux | < 4.19.316-1 | linux_4.19.316-1_all.deb |
| Debian | 999 | all | linux | <= 6.8.12-1 | linux_6.8.12-1_all.deb |
| Debian | 13 | all | linux | <= 6.8.12-1 | linux_6.8.12-1_all.deb |
Related
cvelist
cvelist
CVE-2024-38381 nfc: nci: Fix uninit-value in nci_rx_work
2024-06-21 10:18:12
redhatcve
redhatcve
CVE-2024-38381
2024-06-21 19:21:13
ubuntucve
ubuntucve
CVE-2024-38381
2024-06-25 00:00:00
cve
cve
CVE-2024-38381
2024-06-21 11:15:10
nvd
nvd
CVE-2024-38381
2024-06-21 11:15:10
osv
osv
linux - security update
2024-06-25 00:00:00