CVE-2024-46844

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

um: line: always fill *error_out in setup_one_line()

The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setup_one_line().

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-824

Affected software

VendorProductVersions
LinuxLinux>= 31efcebb7d7196adcee73027f513d7c0bf572b47, < 3bedb7ce080690d0d6172db790790c1219bcbdd5; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < 96301fdc2d533a196197c055af875fe33d47ef84; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < c8944d449fda9f58c03bd99649b2df09948fc874; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < 43f782c27907f306c664b6614fd6f264ac32cce6; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < 289979d64573f43df1d0e6bc6435de63a0d69cdf; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < ec5b47a370177d79ae7773858042c107e21f8ecc; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < fc843d3837ebcb1c16d3768ef3eb55e25d5331f2; >= 31efcebb7d7196adcee73027f513d7c0bf572b47, < 824ac4a5edd3f7494ab1996826c4f47f8ef0f63d
LinuxLinux3.4

References

Timeline

Published
Sep 27, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-468457.8In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat trCVE-2024-468465.5In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtime PM / system PM handling CommCVE-2024-468475.5In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmap_block is initialised before adding to queue CCVE-2024-468485.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Limit the period on Haswell Running the ltp test cve-2CVE-2024-468497.8In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer 'card->dai_link' isCVE-2024-46856.1A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerabilCVE-2024-468504.7In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruCVE-2024-468514.7In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruCVE-2024-468527.8In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault handler Until VM_DONTCVE-2024-468537.8In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpCVE-2024-468547.1In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytesCVE-2024-468555.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: fix sk refcount leaks We must put 'sk' referenc
CVE-2024-46844: High severity, CVSS 7.8 | Vulnix