← Voltar para CVEs

CVE-2024-36898

HIGH

7.8

Descricao

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that results in debouncing in software, and the line is subsequently reconfigured to enable edge detection then the allocation of the kfifo to contain edge events is overlooked. This results in events being written to and read from an uninitialised kfifo. Read events are returned to userspace. Initialise the kfifo in the case where the software debounce is already active.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado5/30/2024

Ultima modificacao9/18/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

linux:linux_kernel

Fraquezas (CWE)

CWE-908

Referencias

https://git.kernel.org/stable/c/1a51e24404d77bb3307c1e39eee0d8e86febb1a5(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/883e4bbf06eb5fb7482679e4edb201093e9f55a2(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/bd7139a70ee8d8ea872b223e043730cf6f5e2b0e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/ee0166b637a5e376118e9659e5b4148080f1d27e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/1a51e24404d77bb3307c1e39eee0d8e86febb1a5(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/883e4bbf06eb5fb7482679e4edb201093e9f55a2(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/bd7139a70ee8d8ea872b223e043730cf6f5e2b0e(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/ee0166b637a5e376118e9659e5b4148080f1d27e(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.