CVE Catalog
CVE-2024-46865
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.23%
13th percentile - higher than 13% of all known CVEs
Summary
A vulnerability related to the initialization of grc in the fou module has been fixed in the Linux kernel. If fou is NULL, there can be a condition where grc is used uninitialized.
Risk Assessment
Improper initialization of grc may lead to unpredictable system behavior, posing a risk of crashes or security breaches.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.