PT-2024-5434

CVE-2024-39481

·

تاريخ النشر

2024-04-10

·

تاريخ التحديث

2026-08-04

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the media pipeline start function in the Linux kernel, where the graph walk tries to follow all links, even if they are not between pads. This causes a crash with certain links, such as MEDIA LNK FL ANCILLARY LINK. The problem is fixed by allowing the walk to proceed only for MEDIA LNK FL DATA LINK links. The vulnerability is associated with insufficient condition checking during graph traversal, which can be exploited to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2025_16880
ALT-PU-2024-10855
ALT-PU-2024-11524
ALT-PU-2024-13979
ALT-PU-2024-14046
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1960
SUSE-SU-2024:2802-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾