Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2024-36020i40e: fix vf may be used uninitialized in this function warning

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the information is the root cause. In this function before the fix bumping v didn't mean bumping vf pointer. But the code used this variables interchangeably, so stale vf could point to different/not intended vf. Remove redundant "v" variable and iterate via single VF pointer across whole function instead to guarantee VF pointer validity.

Timeline

  1. ID reserved

    By Linux

  2. · 13 days later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-36020, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.26% · top 82% of all CVEs (14 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected 76ed715836c6994bac29d9638e9314e6e3b08651 – < cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d
    • affected e88c2a1e28c5475065563d66c07ca879a9afbd07 – < 9dcf0fcb80f6aeb01469e3c957f8d4c97365450a
    • affected 9abae363af5ced6adbf04c14366289540281fb26 – < b8e82128b44fa40bf99a50b919488ef361e1683c
    • affected c39de3ae5075ea5f78e097cb5720d4e52d5caed9 – < 951d2748a2a8242853abc3d0c153ce4bf8faad31
    • affected 52424f974bc53c26ba3f00300a00e9de9afcd972 – < 3e89846283f3cf7c7a8e28b342576fd7c561d2ba
    • affected 52424f974bc53c26ba3f00300a00e9de9afcd972 – < 0dcf573f997732702917af1563aa2493dc772fc0
    • affected 52424f974bc53c26ba3f00300a00e9de9afcd972 – < 06df7618f591b2dc43c59967e294d7b9fc8675b6
    • affected 52424f974bc53c26ba3f00300a00e9de9afcd972 – < f37c4eac99c258111d414d31b740437e1925b8e8
    • affected 02f949747e6fb767b29f7931d4bbf40911684e7a
    • affected 4.19.264 – < 4.19.312
    • affected 5.4.223 – < 5.4.274
    • affected 5.10.153 – < 5.10.215
    • affected 5.15.77 – < 5.15.154
    • affected 6.0.7 – < 6.1

  • Linux · Linux

    • affected 6.1
    • unaffected < 6.1
    • unaffected 4.19.312 – ≤ 4.19.*
    • unaffected 5.4.274 – ≤ 5.4.*
    • unaffected 5.10.215 – ≤ 5.10.*
    • unaffected 5.15.154 – ≤ 5.15.*
    • unaffected 6.1.85 – ≤ 6.1.*
    • unaffected 6.6.26 – ≤ 6.6.*
    • unaffected 6.8.5 – ≤ 6.8.*
    • unaffected 6.9 – ≤ *

References

References11

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-36020 badge
[![CVE-2024-36020](https://cveledger.app/badge/CVE-2024-36020.svg)](https://cveledger.app/cve/CVE-2024-36020)

Record last updated .