Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38619
HistoryJun 20, 2024 - 12:00 a.m.

CVE-2024-38619

2024-06-2000:00:00
ubuntu.com
ubuntu.com
linux kernel
usb-storage
vulnerability
alauda
media initialized
divide errors
error check
unix

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
usb-storage: alauda: Check whether the media is initialized
The member “uzonesize” of struct alauda_info will remain 0
if alauda_init_media() fails, potentially causing divide errors
in alauda_read_data() and alauda_write_lba().

  • Add a member “media_initialized” to struct alauda_info.
  • Change a condition in alauda_check_media() to ensure the
    first initialization.
  • Add an error check for the return value of alauda_init_media().

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Related for UB:CVE-2024-38619