Riskcovery

CVE-2024-36015

ppdev: Add an error check in register_device

State
Published
Severity
Not scored
Published
May 29, 2024
Updated
May 23, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ppdev: Add an error check in register_device

In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value.

To address this issue, index should be checked after ida_simple_get. When the index value is abnormal, a warning message should be printed, the port should be dropped, and the value should be recorded.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before 65cd017d43f4319a56747d38308b0a24cf57299eAffected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before b8c6b83cc3adff3ddf403c8c7063fe6d08b2b9d9Affected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before d32caf51379a4d71db03d3d4d7c22d27cdf7f68bAffected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before b65d0410b879af0295d22438a4a32012786d152aAffected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before df9329247dbbf00f6057e002139ab3fa529ad828Affected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before ec3468221efec6660ff656e9ebe51ced3520fc57Affected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before 5d5b24edad1107a2ffa99058f20f6aeeafeb5d39Affected
  • 9a69645dde1188723d80745c1bc6ee9af2cbe2a7 to before fbf740aeb86a4fe82ad158d26d711f2f3be79b3eAffected
  • 9c2b46e720d5b083268ca0131f513a90696f3a82Affected
  • 762602796be626cbb6b3a6573e00b9ee7db00c97Affected
  • 4.9.22 to before 4.10Affected
  • 4.10.7 to before 4.11Affected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 4.19.316 through 4.19.*Not affected
  • 5.4.278 through 5.4.*Not affected
  • 5.10.219 through 5.10.*Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.9.4 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.