Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-42162 Details

Description

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gve_get_ethtool_stats might make an invalid access on the priv->stats_report->stats array.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7 HIGHVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62 kernel.orgPatch
https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6 kernel.orgPatch
https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62 CVEPatch
https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6 CVEPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-754Improper Check for Unusual or Exceptional Conditions[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.3, <= 6.9.9

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-42162
NVD Published Date:
Jul 30, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-42162 Details - Not Deferred