{"id":"CVE-2024-46865","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuniniti…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-908","CWE-20"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel = 5.10.226","linux_kernel = 5.15.167","linux_kernel = 6.1.110","linux_kernel = 6.6.51","linux_kernel = 6.10.10"],"published":"2024-09-27","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:18:53.800","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-46865","references":[{"url":"https://git.kernel.org/stable/c/16ff0895283058b0f96d4fe277aa25ee096f0ea8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4c8002277167125078e6b9b90137bdf443ebaa08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5d537b8d900514509622ce92330b70d2e581d409","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7ae890ee19479eeeb87724cca8430b5cb3660c74","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/aca06c617c83295f0caa486ad608fbef7bdc11e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46865.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-46865"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315217"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46865"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46865"},{"url":"https://lore.kernel.org/linux-cve-announce/2024092745-CVE-2024-46865-c6a7@gregkh/T"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00546,"epssPercentile":0.45595,"ingestedAt":"2026-10-15T03:30:12.744Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-29T13:42:07.132296Z"},"scores":{"nvd":9.8,"vendor":5.5},"slug":"CVE-2024-46865","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized.\n\n## Affected\n\n- `linux_kernel = 5.10.226`\n- `linux_kernel = 5.15.167`\n- `linux_kernel = 6.1.110`\n- `linux_kernel = 6.6.51`\n- `linux_kernel = 6.10.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46865.json)","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}