VULNERABILITY INTELLIGENCE

CVE-2024-36288

CVSS score9.8 CRITICAL
EPSS probability0.74%
CISA KEVNot currently listed
Published2024-06-21
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]

Weakness classification

  • nvd@nist.gov: CWE-835

Primary references