CVE-2024-46844

um: line: always fill *error_out in setup_one_line()

State: Published
Severity: 7.1 High
Published: Sep 27, 2024
Updated: Aug 5, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

um: line: always fill *error_out in setup_one_line()

The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setup_one_line().

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	31efcebb7d7196adcee73027f513d7c0bf572b47 to before 3bedb7ce080690d0d6172db790790c1219bcbdd5Affected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before 96301fdc2d533a196197c055af875fe33d47ef84Affected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before c8944d449fda9f58c03bd99649b2df09948fc874Affected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before 43f782c27907f306c664b6614fd6f264ac32cce6Affected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before 289979d64573f43df1d0e6bc6435de63a0d69cdfAffected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before ec5b47a370177d79ae7773858042c107e21f8eccAffected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before fc843d3837ebcb1c16d3768ef3eb55e25d5331f2Affected 31efcebb7d7196adcee73027f513d7c0bf572b47 to before 824ac4a5edd3f7494ab1996826c4f47f8ef0f63dAffected
LinuxLinux	3.4Affected before 3.4Not affected 4.19.322 through 4.19.Not affected 5.4.284 through 5.4.Not affected 5.10.226 through 5.10.Not affected 5.15.167 through 5.15.Not affected 6.1.110 through 6.1.Not affected 6.6.51 through 6.6.Not affected 6.10.10 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

31efcebb7d7196adcee73027f513d7c0bf572b47 to before 3bedb7ce080690d0d6172db790790c1219bcbdd5Affected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before 96301fdc2d533a196197c055af875fe33d47ef84Affected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before c8944d449fda9f58c03bd99649b2df09948fc874Affected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before 43f782c27907f306c664b6614fd6f264ac32cce6Affected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before 289979d64573f43df1d0e6bc6435de63a0d69cdfAffected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before ec5b47a370177d79ae7773858042c107e21f8eccAffected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before fc843d3837ebcb1c16d3768ef3eb55e25d5331f2Affected
31efcebb7d7196adcee73027f513d7c0bf572b47 to before 824ac4a5edd3f7494ab1996826c4f47f8ef0f63dAffected

LinuxLinux

3.4Affected
before 3.4Not affected
4.19.322 through 4.19.*Not affected
5.4.284 through 5.4.*Not affected
5.10.226 through 5.10.*Not affected
5.15.167 through 5.15.*Not affected
6.1.110 through 6.1.*Not affected
6.6.51 through 6.6.*Not affected
6.10.10 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.