Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2024-46865: Linux kernel may crash due to uninitialized data
CVE-2024-46865 · published 2 years ago
Summary
The Linux kernel component that handles certain network functions can sometimes use a variable before it has been set up, which may cause the system to stop working or restart unexpectedly. This occurs when a particular pointer is missing and the code proceeds without proper checks. Updating the kernel to the latest version from your Linux distribution will apply the fix and prevent the issue.
What to do
- Update linux kernel to version 6.10.11.
- Update debian linux to version 6.1.112-1.
- Update debian linux to version 6.10.11-1.
- Update canonical linux-aws-5.15 to version 5.15.0-1073.79~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1072.80~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-127.137~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1066.69~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1071.77~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-127.137~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1071.77~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1069.73~20.04.1.
- Update canonical linux to version 5.15.0-127.137.
- Update canonical linux-aws to version 5.15.0-1073.79.
- Update canonical linux-azure to version 5.15.0-1078.87.
- Update canonical linux-gcp to version 5.15.0-1072.80.
- Update canonical linux-gke to version 5.15.0-1070.76.
- Update canonical linux-gkeop to version 5.15.0-1056.63.
- Update canonical linux-ibm to version 5.15.0-1066.69.
- Update canonical linux-intel-iotg to version 5.15.0-1071.77.
- Update canonical linux-kvm to version 5.15.0-1070.75.
- Update canonical linux-lowlatency to version 5.15.0-127.137.
- Update canonical linux-nvidia to version 5.15.0-1068.69.
- Update canonical linux-oracle to version 5.15.0-1071.77.
- Update canonical linux-raspi to version 5.15.0-1066.69.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1039.43.
- Update canonical linux-bluefield to version 5.15.0-1057.59.
- Update canonical linux-realtime to version 5.15.0-1074.82.
- Update canonical linux-aws-fips to version 5.15.0-1073.79+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1078.87+fips1.
- Update canonical linux-fips to version 5.15.0-127.137+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1072.80+fips1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
5.10.226 5.15.167 6.1.110 6.6.51 6.10.10 cpe:2.3:o:linux:linux_kernel:5.10.226:*:*:*:*:*:*:* |
| – | linux | linux |
< 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e < 5.10.227 |
| Linux | linux | kernel |
>= 6.10.10, < 6.10.11 Fix: upgrade to 6.10.11
|
| Debian:12 | debian | linux |
< 6.1.112-1 Fix: upgrade to 6.1.112-1
|
| Debian:13 | debian | linux |
< 6.10.11-1 Fix: upgrade to 6.10.11-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1073.79~20.04.1 Fix: upgrade to 5.15.0-1073.79~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1072.80~20.04.1 Fix: upgrade to 5.15.0-1072.80~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-127.137~20.04.1 Fix: upgrade to 5.15.0-127.137~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1066.69~20.04.1 Fix: upgrade to 5.15.0-1066.69~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1071.77~20.04.1 Fix: upgrade to 5.15.0-1071.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-127.137~20.04.1 Fix: upgrade to 5.15.0-127.137~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1071.77~20.04.1 Fix: upgrade to 5.15.0-1071.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1069.73~20.04.1 Fix: upgrade to 5.15.0-1069.73~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 107. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-127.137 Fix: upgrade to 5.15.0-127.137
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1073.79 Fix: upgrade to 5.15.0-1073.79
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1078.87 Fix: upgrade to 5.15.0-1078.87
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1072.80 Fix: upgrade to 5.15.0-1072.80
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1070.76 Fix: upgrade to 5.15.0-1070.76
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1056.63 Fix: upgrade to 5.15.0-1056.63
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1066.69 Fix: upgrade to 5.15.0-1066.69
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1071.77 Fix: upgrade to 5.15.0-1071.77
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1070.75 Fix: upgrade to 5.15.0-1070.75
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-127.137 Fix: upgrade to 5.15.0-127.137
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1068.69 Fix: upgrade to 5.15.0-1068.69
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1071.77 Fix: upgrade to 5.15.0-1071.77
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1066.69 Fix: upgrade to 5.15.0-1066.69
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1039.43 Fix: upgrade to 5.15.0-1039.43
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1057.59 Fix: upgrade to 5.15.0-1057.59
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1074.82 Fix: upgrade to 5.15.0-1074.82
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1073.79+fips1 Fix: upgrade to 5.15.0-1073.79+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1078.87+fips1 Fix: upgrade to 5.15.0-1078.87+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-127.137+fips1 Fix: upgrade to 5.15.0-127.137+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1072.80+fips1 Fix: upgrade to 5.15.0-1072.80+fips1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
Original advisory text
fou: fix initialization of grc
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
References
- https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8 URL
- https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e URL
- https://ubuntu.com/security/CVE-2024-46865 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-46865 Third Party Advisory
- https://git.kernel.org/linus/4c8002277167125078e6b9b90137bdf443ebaa08 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7166-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7166-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7166-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7186-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7186-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7194-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7166-4 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46865... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46865 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08 URL
- https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409 URL
- https://security-tracker.debian.org/tracker/CVE-2024-46865 Vendor Advisory
- https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8 URL
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html URL
- https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74 URL
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-908Use of Uninitialized Resource
Timeline
Published27 Sep 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-46865 · OSV
CVE-2024-46865 · NVD
CVE-2024-46865 · MITRE
DEBIAN-CVE-2024-46865 · OSV
UBUNTU-CVE-2024-46865 · OSV
Track software like this
Free during beta