CVE-2024-46865: fou: fix initialization of grc
In the Linux kernel, the following vulnerability has been resolved:
fou: fix initialization of grc
The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46865?
CVE-2024-46865 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-46865?
To fix CVE-2024-46865, you should upgrade to the latest patched versions, such as Linux Kernel 6.1.128-1 or later.
Which Linux kernel versions are affected by CVE-2024-46865?
CVE-2024-46865 affects Linux Kernel versions 5.10.226, 5.15.167, 6.1.110, 6.10.10, and 6.6.51.
What components of the Linux kernel does CVE-2024-46865 involve?
CVE-2024-46865 involves the fou component of the Linux kernel, related to uninitialized memory access.
Is there a known exploit for CVE-2024-46865?
As of now, there are no publicly known exploits for CVE-2024-46865, but it is advisable to apply the patch to mitigate potential risks.