7.8

CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes

Modified
AliasesUBUNTU-CVE-2024-41064DEBIAN-CVE-2024-41064
Published 29-07-2024Last modified 05-08-2026

Vulnerability summary

CVE-2024-41064 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 45 · Related 38
DLA-4008-1DSA-5747-1MGASA-2024-0277MGASA-2024-0278RHSA-2024:10942RHSA-2024:7000

Timeline

  1. 29-07-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a crash, hold the PCI rescan/remove lock while taking a copy of edev->pdev->bus.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.24% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu129 products
  • linuxAll versions (No fix recorded) | < 4.4.0-266.300 | < 4.15.0-235.247 | < 5.4.0-200.220 | < 5.15.0-125.135 | < 6.8.0-48.48
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1141.147 | < 4.4.0-1179.194 | < 4.15.0-1178.191 | < 5.4.0-1135.145 | < 5.15.0-1072.78 | < 6.8.0-1018.20
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < 8836e1bf5838ac6c08760e0a2dd7cf6410aa7ff3 | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < 033c51dfdbb6b79ab43fb3587276fa82d0a329e1 | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < 4fad7fef847b6028475dd7b4c14fcb82b3e51274 | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < 4bc246d2d60d071314842fa448faa4ed39082aff | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < f23c3d1ca9c4b2d626242a4e7e1ec1770447f7b5 | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < 428d940a8b6b3350b282c14d3f63350bde65c48b | ≥ 9b3c76f08122f5efdbe4992a64b8478cc92dd983, < a1216e62d039bf63a539bbe718536ec789a853dd | 3.7
  • linux_kernel< 5.4.281 | ≥ 5.5, < 5.10.223 | ≥ 5.11, < 5.15.164 | ≥ 5.16, < 6.1.101 | ≥ 6.2, < 6.6.42 | ≥ 6.7, < 6.9.11
Debian1 product
  • linux< 6.1.106-1 | < 6.9.11-1

3 vendors · 132 products

References

40 links
Show all 40 references