#VU102974 Resource management error in Linux kernel - CVE-2024-52332
Vulnerability identifier: #VU102974
Vulnerability risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-52332
CWE-ID:
CWE-399
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to resource management error within the igb_init_module() function in drivers/net/ethernet/intel/igb/igb_main.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel: All versions
External links
https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29
https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36
https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484
https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54
https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f
https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3
https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
