In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_line() The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setup_one_line().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/289979d64573f43df1d0e6bc6435de63a0d69cdf cve-icon cve-icon
https://git.kernel.org/stable/c/3bedb7ce080690d0d6172db790790c1219bcbdd5 cve-icon cve-icon
https://git.kernel.org/stable/c/43f782c27907f306c664b6614fd6f264ac32cce6 cve-icon cve-icon
https://git.kernel.org/stable/c/824ac4a5edd3f7494ab1996826c4f47f8ef0f63d cve-icon cve-icon
https://git.kernel.org/stable/c/96301fdc2d533a196197c055af875fe33d47ef84 cve-icon cve-icon
https://git.kernel.org/stable/c/c8944d449fda9f58c03bd99649b2df09948fc874 cve-icon cve-icon
https://git.kernel.org/stable/c/ec5b47a370177d79ae7773858042c107e21f8ecc cve-icon cve-icon
https://git.kernel.org/stable/c/fc843d3837ebcb1c16d3768ef3eb55e25d5331f2 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024092755-CVE-2024-46844-af64@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-46844 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-46844 cve-icon
History

Wed, 02 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-824
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Sun, 29 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 28 Sep 2024 01:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Sep 2024 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_line() The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setup_one_line().
Title um: line: always fill *error_out in setup_one_line()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-09-27T12:39:37.685Z

Updated: 2024-11-05T09:47:42.223Z

Reserved: 2024-09-11T15:12:18.289Z

Link: CVE-2024-46844

cve-icon Vulnrichment

Updated: 2024-09-29T13:59:14.677Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-27T13:15:16.313

Modified: 2024-10-02T14:22:50.533

Link: CVE-2024-46844

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-09-27T00:00:00Z

Links: CVE-2024-46844 - Bugzilla