Homepage

Improper Validation of Array Index The advisory has been revoked - it doesn't affect any version of package kernel-ipaclones-internal  (opens in a new tab)

Threat Intelligence

EPSS
0.02% (5th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS9-KERNELIPACLONESINTERNAL-7159936
  • published29 May 2024
  • disclosed29 May 2024
Report a new vulnerability Found a mistake?

Introduced: 29 May 2024

CVE-2024-36015  (opens in a new tab)
CWE-129  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-ipaclones-internal package and not the kernel-ipaclones-internal package as distributed by Centos.

In the Linux kernel, the following vulnerability has been resolved:

ppdev: Add an error check in register_device

In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value.

To address this issue, index should be checked after ida_simple_get. When the index value is abnormal, a warning message should be printed, the port should be dropped, and the value should be recorded.