Lucene search

LinuxVULNRICHMENT:CVE-2024-41052

HistoryJul 29, 2024 - 2:32 p.m.

CVE-2024-41052 vfio/pci: Init the count variable in collecting hot-reset devices

2024-07-2914:32:08

Linux

github.com

linux kernel

vulnerability

vfio/pci

hot-reset devices

initialization

crashing

userspace

cve-2024-41052

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Init the count variable in collecting hot-reset devices

The count variable is used without initialization, it results in mistakes
in the device counting and crashes the userspace if the get hot reset info
path is triggered.

References

git.kernel.org/stable/c/5a88a3f67e37e39f933b38ebb4985ba5822e9eca

git.kernel.org/stable/c/f44136b9652291ac1fc39ca67c053ac624d0d11b

git.kernel.org/stable/c/f476dffc52ea70745dcabf63288e770e50ac9ab3