CVE-2024-38619

usb-storage: alauda: Check whether the media is initialized

State: Published
Severity: Not scored
Published: Jun 20, 2024
Updated: Oct 15, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb-storage: alauda: Check whether the media is initialized

The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0aab7b07a9375337847c9d74a5ec044071e01c8Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 51fe16c058acb22f847e69bc598066ed0bcd5c15Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before f68820f1256b21466ff094dd97f243b7e708f9c1Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 3eee13ab67f65606faa66e0c3c729e4f514838fdAffected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0e2eec76920a133dd49a4fbe4656d83596a1361Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 2cc32639ec347e3365075b130f9953ef16cb13f1Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4Affected e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 16637fea001ab3c8df528a8995b3211906165a30Affected
LinuxLinux	2.6.16Affected before 2.6.16Not affected 4.19.317 through 4.19.Not affected 5.4.279 through 5.4.Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.95 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.6 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0aab7b07a9375337847c9d74a5ec044071e01c8Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 51fe16c058acb22f847e69bc598066ed0bcd5c15Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before f68820f1256b21466ff094dd97f243b7e708f9c1Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 3eee13ab67f65606faa66e0c3c729e4f514838fdAffected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0e2eec76920a133dd49a4fbe4656d83596a1361Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 2cc32639ec347e3365075b130f9953ef16cb13f1Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4Affected
e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 16637fea001ab3c8df528a8995b3211906165a30Affected

LinuxLinux

2.6.16Affected
before 2.6.16Not affected
4.19.317 through 4.19.*Not affected
5.4.279 through 5.4.*Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.95 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.6 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.