Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jiawen Wu

Researcher fromTrustnetic
#45791of 53,640
5.5Total CVSS
Vulnerabilities · 1
PT-2024-10455
5.5
2024-07-30
Linux · Linux Kernel · CVE-2024-42113
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.43 **Description** The vulnerability is related to the use of an uninitialized resource in the Linux kernel's net component. When using MSI/INTx interrupts, the `wx->num q vectors` variable is uninitialized, leading to a kernel panic in the `wx alloc q vectors()` function. This issue can be exploited to cause a denial of service. **Recommendations** To resolve the issue, update the Linux kernel to version 6.6.43 or later. As a temporary workaround, consider disabling the use of MSI/INTx interrupts until a patch is available. Restrict access to the vulnerable `net` component to minimize the risk of exploitation. Avoid using the `wx alloc q vectors()` function until the issue is resolved.