{"api_version":"1","generated_at":"2026-07-23T14:54:49+00:00","cve":"CVE-2024-46865","urls":{"html":"https://cve.report/CVE-2024-46865","api":"https://cve.report/api/cve/CVE-2024-46865.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2024-46865","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-46865"},"summary":{"title":"fou: fix initialization of grc","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized.","state":"PUBLISHED","assigner":"Linux","published_at":"2024-09-27 13:15:17","updated_at":"2026-05-12 12:17:12"},"problem_types":["CWE-908"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html","name":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e","name":"https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08","name":"https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74","name":"https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","name":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","refsource":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8","name":"https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409","name":"https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8","name":"https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html","name":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46865","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46865","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 231c235d2f7a66f018f172e26ffd47c363f244ef 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 4494bccb52ffda22ce5a1163a776d970e6229e08 16ff0895283058b0f96d4fe277aa25ee096f0ea8 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3 5d537b8d900514509622ce92330b70d2e581d409 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 1df42be305fe478ded1ee0c1d775f4ece713483b 7ae890ee19479eeeb87724cca8430b5cb3660c74 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected c46cd6aaca81040deaea3500ba75126963294bd9 aca06c617c83295f0caa486ad608fbef7bdc11e8 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7e4196935069947d8b70b09c1660b67b067e75cb 4c8002277167125078e6b9b90137bdf443ebaa08 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.10.226 5.10.227 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.15.167 5.15.168 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.1.110 6.1.111 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.6.51 6.6.52 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.10.10 6.10.11 semver","platforms":[]},{"source":"ADP","vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","version":"affected * custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2024","cve_id":"46865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"5.10.226","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2024","cve_id":"46865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"5.15.167","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2024","cve_id":"46865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.1.110","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2024","cve_id":"46865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.10.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2024","cve_id":"46865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"6.6.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2024","cve_id":"46865","cve":"CVE-2024-46865","epss":"0.000140000","percentile":"0.026040000","score_date":"2026-05-12","updated_at":"2026-05-13 00:11:53"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2024-46865","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-09-29T13:42:07.132296Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2024-09-29T13:43:27.114Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-11-03T22:19:47.627Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"title":"CVE Program Container"},{"affected":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"providerMetadata":{"dateUpdated":"2026-05-12T11:58:02.422Z","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP"},"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"x_adpType":"supplier"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e","status":"affected","version":"231c235d2f7a66f018f172e26ffd47c363f244ef","versionType":"git"},{"lessThan":"16ff0895283058b0f96d4fe277aa25ee096f0ea8","status":"affected","version":"4494bccb52ffda22ce5a1163a776d970e6229e08","versionType":"git"},{"lessThan":"5d537b8d900514509622ce92330b70d2e581d409","status":"affected","version":"d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3","versionType":"git"},{"lessThan":"7ae890ee19479eeeb87724cca8430b5cb3660c74","status":"affected","version":"1df42be305fe478ded1ee0c1d775f4ece713483b","versionType":"git"},{"lessThan":"aca06c617c83295f0caa486ad608fbef7bdc11e8","status":"affected","version":"c46cd6aaca81040deaea3500ba75126963294bd9","versionType":"git"},{"lessThan":"4c8002277167125078e6b9b90137bdf443ebaa08","status":"affected","version":"7e4196935069947d8b70b09c1660b67b067e75cb","versionType":"git"}]},{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5.10.227","status":"affected","version":"5.10.226","versionType":"semver"},{"lessThan":"5.15.168","status":"affected","version":"5.15.167","versionType":"semver"},{"lessThan":"6.1.111","status":"affected","version":"6.1.110","versionType":"semver"},{"lessThan":"6.6.52","status":"affected","version":"6.6.51","versionType":"semver"},{"lessThan":"6.10.11","status":"affected","version":"6.10.10","versionType":"semver"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.227","versionStartIncluding":"5.10.226","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.168","versionStartIncluding":"5.15.167","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.111","versionStartIncluding":"6.1.110","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.52","versionStartIncluding":"6.6.51","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.10.11","versionStartIncluding":"6.10.10","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized."}],"providerMetadata":{"dateUpdated":"2026-05-11T20:38:03.171Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e"},{"url":"https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8"},{"url":"https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409"},{"url":"https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74"},{"url":"https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8"},{"url":"https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08"}],"title":"fou: fix initialization of grc","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2024-46865","datePublished":"2024-09-27T12:42:53.691Z","dateReserved":"2024-09-11T15:12:18.294Z","dateUpdated":"2026-05-12T11:58:02.422Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2024-09-27 13:15:17","lastModifiedDate":"2026-05-12 12:17:12","problem_types":["CWE-908"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:5.10.226:*:*:*:*:*:*:*","matchCriteriaId":"6FF3CC29-3CB0-439D-B47A-358D57871F06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:5.15.167:*:*:*:*:*:*:*","matchCriteriaId":"B69DB824-7793-4911-A284-B06E7EFEDD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:6.1.110:*:*:*:*:*:*:*","matchCriteriaId":"BE9D244D-F8E0-4625-8EE0-5F654BC926C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:6.6.51:*:*:*:*:*:*:*","matchCriteriaId":"C599A8CC-8612-442F-9C8A-A2AC38388756"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:6.10.10:*:*:*:*:*:*:*","matchCriteriaId":"7BDB319B-4374-489F-AF7A-CB5F0B71A038"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2024","CveId":"46865","Ordinal":"1","Title":"fou: fix initialization of grc","CVE":"CVE-2024-46865","Year":"2024"},"notes":[{"CveYear":"2024","CveId":"46865","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized.","Type":"Description","Title":"fou: fix initialization of grc"}]}}}