CVE-2024-52332 — Out-of-bounds Read in Linux

CWE-125 — Out-of-bounds ReadCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer77 documents7 sources
Severity
7.1HIGHNVD
OSV8.8OSV7.8OSV5.5
EPSS
0.0%
top 98.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedJan 11
Latest updateAug 14

Description

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages6 packages

▶NVDlinux/linux_kernel2.6.30 — 5.4.287+7
▶Debianlinux/linux_kernel< 5.10.234-1+3
▶Ubuntulinux/linux_kernel< 5.4.0-211.231+2
▶CVEListV5linux/linuxbbd98fe48a43464b4a044bc4cbeefad284d6aa80 — 4458046617dfadc351162dbaea1945c57eebdf36+7
▶debiandebian/linux< linux 6.1.123-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

38
OSV
linux-raspi-5.4 vulnerabilities↗2025-05-28
▶
OSV
linux-raspi vulnerabilities↗2025-05-28
▶
OSV
linux-raspi vulnerabilities↗2025-05-26
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-05-20
▶
OSV
linux-gcp-5.15 vulnerabilities↗2025-04-28
▶

📋Vendor Advisories

38
CISA ICS
Siemens Third-Party Components in SINEC OS↗2025-08-14
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-28
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-28
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-26
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-05-20
▶