{"id":"CVE-2024-46865","revision":"82b594458ae149309cb419292de0d3b9","records":[{"revision":"82b594458ae149309cb419292de0d3b9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-46865","aliases":[],"title":"fou: fix initialization of grc","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized.","state":0,"publishedAt":"2024-09-27T12:42:53.691+00:00","modifiedAt":"2026-10-15T00:50:58.578+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/ipv4/fou_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"231c235d2f7a66f018f172e26ffd47c363f244ef\",\n                            \"lessThan\": \"392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4494bccb52ffda22ce5a1163a776d970e6229e08\",\n                            \"lessThan\": \"16ff0895283058b0f96d4fe277aa25ee096f0ea8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3\",\n                            \"lessThan\": \"5d537b8d900514509622ce92330b70d2e581d409\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1df42be305fe478ded1ee0c1d775f4ece713483b\",\n                            \"lessThan\": \"7ae890ee19479eeeb87724cca8430b5cb3660c74\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c46cd6aaca81040deaea3500ba75126963294bd9\",\n                            \"lessThan\": \"aca06c617c83295f0caa486ad608fbef7bdc11e8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e4196935069947d8b70b09c1660b67b067e75cb\",\n                            \"lessThan\": \"4c8002277167125078e6b9b90137bdf443ebaa08\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/ipv4/fou_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.10.226\",\n                            \"lessThan\": \"5.10.227\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.167\",\n                            \"lessThan\": \"5.15.168\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.110\",\n                            \"lessThan\": \"6.1.111\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.51\",\n                            \"lessThan\": \"6.6.52\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.10\",\n                            \"lessThan\": \"6.10.11\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e","https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8","https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409","https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74","https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8","https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-46865","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-46865","identifiers":["CVE-2024-46865"]},"retained":false,"historicalAffected":[]}],"coverage":[]}