NetSight
IP …
medium5.5

CVE-2024-38619

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struc…

Impact

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.16 before 4.19.317
from 4.20 before 5.4.279
from 5.5 before 5.10.221
from 5.11 before 5.15.162
from 5.16 before 6.1.95
from 6.2 before 6.6.35

Weakness classification

CWE-908

References