CVE-2024-38381
- Source
- https://cve.org/CVERecord?id=CVE-2024-38381
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38381.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-38381
- Downstream
BELL (1)
CGA (48)
- CGA-2ghg-39f2-r398
- CGA-356q-prhg-h56q
- CGA-4745-j25f-f47q
- CGA-4f2j-2h8r-5w6c
- CGA-4q4q-jmrw-mfr4
- CGA-4xhw-cjgf-jgw5
- CGA-6px9-6g85-49mp
- CGA-6vgf-7789-x732
- CGA-7r2r-59rc-3w3f
- CGA-8c42-wv83-c6xx
- CGA-96q6-5q3p-w933
- CGA-9cjj-2qwc-ch25
- CGA-9f9m-gcgg-62cm
- CGA-9mhh-9vr8-774q
- CGA-9r93-mjmp-w47v
- CGA-c2rj-h6fx-5r2m
- CGA-c95q-hj64-8x5v
- CGA-f87h-c22g-9pwg
- CGA-fcgg-r6j3-gr7j
- CGA-gp24-4q6f-65c5
- CGA-h7h3-f84h-vq4g
- CGA-hghg-758r-8hq4
- CGA-m8q9-x2pm-g3vc
- CGA-mcr7-54h4-x4qx
- CGA-mm6w-gv9f-8rpj
- CGA-mq28-rph8-wrvr
- CGA-p5ph-9x6j-7rf2
- CGA-p85q-cr4q-r9g8
- CGA-qcqg-wg4v-hqj2
- CGA-qv2c-4f23-jq94
- CGA-qw3f-fwm9-5wg9
- CGA-r4c7-h52f-3m33
- CGA-v338-hx67-pp8q
- CGA-v66g-qj96-w4h8
- CGA-v66w-wh2h-wwrm
- CGA-vj8x-w2mc-ggfj
- CGA-vjgh-f42r-fhp4
- CGA-vp6v-6cvg-xg6r
- CGA-vwvf-mf92-mvmf
- CGA-vxxv-crwm-6jxf
- CGA-w7hq-29rv-jjmx
- CGA-w7rv-8xhw-hm73
- CGA-w976-pqf6-rm82
- CGA-x54x-q689-w95w
- CGA-x8f6-h423-8r9h
- CGA-xcpg-7x38-8jw6
- CGA-xqqw-v558-pfqq
- CGA-xv7v-hm5v-2q52
MGASA (2)
MINI (1)
SUSE (11)
- Related
- Published
- 2024-06-21T10:18:12Z
- Modified
- 2026-10-28T02:31:10Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- nfc: nci: Fix uninit-value in nci_rx_work
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: Fix uninit-value in nci_rx_work
syzbot reported the following uninit-value access issue [1]
nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38381.json" }- References
-
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://git.kernel.org/stable/c/017ff397624930fd7ac7f1761f3c9d6a7100f68c
- https://git.kernel.org/stable/c/406cfac9debd4a6d3dc5d9258ee086372a8c08b6
- https://git.kernel.org/stable/c/485ded868ed62ceb2acb3a459d7843fd71472619
- https://git.kernel.org/stable/c/ad4d196d2008c7f413167f0a693feb4f0439d7fe
- https://git.kernel.org/stable/c/e4a87abf588536d1cdfb128595e6e680af5cf3ed
- https://git.kernel.org/stable/c/e53a7f8afcbd2886f2a94c5d56757328109730ea
- https://git.kernel.org/stable/c/e8c8e0d0d214c877fbad555df5b3ed558cd9b0c3
- https://git.kernel.org/stable/c/f80b786ab0550d0020191a59077b2c7e069db2d1
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38381.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-38381
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced11387b2effbb55f58dc2111ef4b4b896f2756240Fixed406cfac9debd4a6d3dc5d9258ee086372a8c08b6
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced03fe259649a551d336a7f20919b641ea100e3fffFixed485ded868ed62ceb2acb3a459d7843fd71472619
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced755e53bbc61bc1aff90eafa64c8c2464fd3dfa3cFixedf80b786ab0550d0020191a59077b2c7e069db2d1
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedac68d9fa09e410fa3ed20fb721d56aa558695e16Fixedad4d196d2008c7f413167f0a693feb4f0439d7fe
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb51ec7fc9f877ef869c01d3ea6f18f6a64e831a7Fixede8c8e0d0d214c877fbad555df5b3ed558cd9b0c3
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda946ebee45b09294c8b0b0e77410b763c4d2817aFixede53a7f8afcbd2886f2a94c5d56757328109730ea
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd24b03535e5eb82e025219c2f632b485409c898fFixed017ff397624930fd7ac7f1761f3c9d6a7100f68cFixede4a87abf588536d1cdfb128595e6e680af5cf3ed
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced4.19.312Fixed4.19.316
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5.4.274Fixed5.4.278
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5.10.215Fixed5.10.219
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5.15.154Fixed5.15.161
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.1.85Fixed6.1.93
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.6.26Fixed6.6.33
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.8.5Fixed6.9
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8948e30de81faee87eeee01ef42a1f6008f5a83a
Affected versions
v4.*
v4.19.312
v4.19.313
v4.19.314
v4.19.315
v5.*
v5.10.215
v5.10.216
v5.10.217
v5.10.218
v5.15.154
v5.15.155
v5.15.156
v5.15.157
v5.15.158
v5.15.159
v5.15.160
v5.4.274
v5.4.275
v5.4.276
v5.4.277
v6.*
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.90
v6.1.91
v6.1.92
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.30
v6.6.31
v6.6.32
v6.8.10
v6.8.11
v6.8.12
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.8.9
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed4.19.316
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.278
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.219
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.161
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.93
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.33
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.9.4