CVE-2024-46747

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= b8e759b8f6dab1c473c30ac12709095d0b81078e, < e239e44dcd419b13cf840e2a3a833204e4329714; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < fac3cb3c6428afe2207593a183b5bc4742529dfd; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < 34185de73d74fdc90e8651cfc472bfea6073a13f; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < 890dde6001b651be79819ef7a3f8c71fc8f9cabf; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < e4a602a45aecd6a98b4b37482f5c9f8f67a32ddd; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < 30e9ce7cd5591be639b53595c95812f1a2afdfdc; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < 48b2108efa205f4579052c27fba2b22cc6ad8aa0; >= b8e759b8f6dab1c473c30ac12709095d0b81078e, < a6e9c391d45b5865b61e569146304cff72821a5d
LinuxLinux4.19

References

Timeline

Published
Sep 18, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-467485.5In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT SCVE-2024-467495.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()CVE-2024-46756.1A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerabilitCVE-2024-467505.5In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positivCVE-2024-467515.5In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_infCVE-2024-467525.5In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() InCVE-2024-467535.5In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() wCVE-2024-467545.5In the Linux kernel, the following vulnerability has been resolved: bpf: Remove tst_run from lwt_seg6local_prog_ops. The syzbot reported tCVE-2024-467555.5In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() mCVE-2024-467597.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes CVE-2024-46766.1A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects somCVE-2024-467605.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right no
CVE-2024-46747: High severity, CVSS 7.1 | Vulnix