In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.35.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:6567 2024-09-11T00:00:00Z
kernel-0:5.14.0-427.35.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:6567 2024-09-11T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/16637fea001ab3c8df528a8995b3211906165a30 cve-icon cve-icon
https://git.kernel.org/stable/c/24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4 cve-icon cve-icon
https://git.kernel.org/stable/c/2cc32639ec347e3365075b130f9953ef16cb13f1 cve-icon cve-icon
https://git.kernel.org/stable/c/3eee13ab67f65606faa66e0c3c729e4f514838fd cve-icon cve-icon
https://git.kernel.org/stable/c/51fe16c058acb22f847e69bc598066ed0bcd5c15 cve-icon cve-icon
https://git.kernel.org/stable/c/e0aab7b07a9375337847c9d74a5ec044071e01c8 cve-icon cve-icon
https://git.kernel.org/stable/c/e0e2eec76920a133dd49a4fbe4656d83596a1361 cve-icon cve-icon
https://git.kernel.org/stable/c/f68820f1256b21466ff094dd97f243b7e708f9c1 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062035-CVE-2024-38619-97c7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-38619 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-38619 cve-icon
History

Tue, 24 Sep 2024 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::nfv

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-20T06:47:32.444Z

Updated: 2024-11-05T09:31:04.842Z

Reserved: 2024-06-18T19:36:34.945Z

Link: CVE-2024-38619

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:26.271Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-06-20T07:15:41.830

Modified: 2024-11-21T09:26:30.223

Link: CVE-2024-38619

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2024-38619 - Bugzilla