VULNERABILITY INTELLIGENCE

CVE-2024-36015

CVSS score7.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-05-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value. To address this issue, index should be checked after ida_simple_get. When the index value is abnormal, a warning message should be printed, the port should be dropped, and the value should be recorded.

Weakness classification

  • nvd@nist.gov: CWE-129

Primary references