Wind River Support Network

HomeDefectsLIN1024-3141

Fixed

LIN1024-3141 : Security Advisory - linux - CVE-2024-41052

Created: Jul 29, 2024 Updated: Aug 28, 2024

Resolved Date: Jul 29, 2024

Found In Version: 10.24.33.1

Fix Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Init the count variable in collecting hot-reset devices

The count variable is used without initialization, it results in mistakes
in the device counting and crashes the userspace if the get hot reset info
path is triggered.

CREATE(Triage):(User=admin) CVE-2024-41052 (https://nvd.nist.gov/vuln/detail/CVE-2024-41052)

CVEs

CVE-2024-41052