CVE-2024-52332

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-52332
In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29 Patch
https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36 Patch
https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484 Patch
https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54 Patch
https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f Patch
https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3 Patch
https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
History

23 Sep 2025, 14:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.29:-:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29 - () https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29 - Patch
References () https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36 - () https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36 - Patch
References () https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484 - () https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484 - Patch
References () https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54 - () https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54 - Patch
References () https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f - () https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f - Patch
References () https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3 - () https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3 - Patch
References () https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae - () https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: igb: Se corrige un posible acceso no válido a la memoria en igb_init_module(). pci_register_driver() puede fallar y cuando esto sucede, se debe anular el registro de dca_notifier; de lo contrario, se puede llamar a dca_notifier cuando igb no se instala, lo que genera un acceso no válido a la memoria.
First Time Linux
Linux linux Kernel
CWE CWE-125
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

11 Jan 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-11 13:15

Updated : 2025-09-23 14:42

NVD link : CVE-2024-52332

Mitre link : CVE-2024-52332

CVE.ORG link : CVE-2024-52332

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read