CVE-2024-46865

fou: fix initialization of grc

State: Published
Severity: 9.8 Critical
Published: Sep 27, 2024
Updated: Oct 15, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fou: fix initialization of grc

The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	231c235d2f7a66f018f172e26ffd47c363f244ef to before 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3eAffected 4494bccb52ffda22ce5a1163a776d970e6229e08 to before 16ff0895283058b0f96d4fe277aa25ee096f0ea8Affected d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3 to before 5d537b8d900514509622ce92330b70d2e581d409Affected 1df42be305fe478ded1ee0c1d775f4ece713483b to before 7ae890ee19479eeeb87724cca8430b5cb3660c74Affected c46cd6aaca81040deaea3500ba75126963294bd9 to before aca06c617c83295f0caa486ad608fbef7bdc11e8Affected 7e4196935069947d8b70b09c1660b67b067e75cb to before 4c8002277167125078e6b9b90137bdf443ebaa08Affected
LinuxLinux	5.10.226 to before 5.10.227Affected 5.15.167 to before 5.15.168Affected 6.1.110 to before 6.1.111Affected 6.6.51 to before 6.6.52Affected 6.10.10 to before 6.10.11Affected

Product

Versions

LinuxLinux

231c235d2f7a66f018f172e26ffd47c363f244ef to before 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3eAffected
4494bccb52ffda22ce5a1163a776d970e6229e08 to before 16ff0895283058b0f96d4fe277aa25ee096f0ea8Affected
d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3 to before 5d537b8d900514509622ce92330b70d2e581d409Affected
1df42be305fe478ded1ee0c1d775f4ece713483b to before 7ae890ee19479eeeb87724cca8430b5cb3660c74Affected
c46cd6aaca81040deaea3500ba75126963294bd9 to before aca06c617c83295f0caa486ad608fbef7bdc11e8Affected
7e4196935069947d8b70b09c1660b67b067e75cb to before 4c8002277167125078e6b9b90137bdf443ebaa08Affected

LinuxLinux

5.10.226 to before 5.10.227Affected
5.15.167 to before 5.15.168Affected
6.1.110 to before 6.1.111Affected
6.6.51 to before 6.6.52Affected
6.10.10 to before 6.10.11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.