In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a crash, hold the PCI rescan/remove lock while taking a copy of edev->pdev->bus.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/033c51dfdbb6b79ab43fb3587276fa82d0a329e1 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/428d940a8b6b3350b282c14d3f63350bde65c48b cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/4bc246d2d60d071314842fa448faa4ed39082aff cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/4fad7fef847b6028475dd7b4c14fcb82b3e51274 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8836e1bf5838ac6c08760e0a2dd7cf6410aa7ff3 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/a1216e62d039bf63a539bbe718536ec789a853dd cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/f23c3d1ca9c4b2d626242a4e7e1ec1770447f7b5 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072907-CVE-2024-41064-6ecb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-41064 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-41064 cve-icon
History

Tue, 24 Sep 2024 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 06 Sep 2024 13:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-413

Mon, 26 Aug 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T14:57:26.086Z

Updated: 2024-09-11T17:32:58.925Z

Reserved: 2024-07-12T12:17:45.628Z

Link: CVE-2024-41064

cve-icon Vulnrichment

Updated: 2024-08-02T04:46:51.169Z

cve-icon NVD

Status : Analyzed

Published: 2024-07-29T15:15:14.330

Modified: 2024-08-26T14:19:53.547

Link: CVE-2024-41064

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41064 - Bugzilla