8.6

CVE-2024-47682: linux Off-by-one Error

CVSS: 8.6v3.1HighModified
AliasesUBUNTU-CVE-2024-47682DEBIAN-CVE-2024-47682
Published 21-10-2024Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2024-47682 is a high (CVSS 8.6) Off-by-one Error vulnerability in linux. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.6/10
010
High · v3.1 (CVE.org)
EPSS score
0.54%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 28 · Related 27
DLA-4008-1MGASA-2024-0344MGASA-2024-0345OPENSUSE-SU-2024:14500-1OPENSUSE-SU-2025:14705-1SUSE-SU-2024:3984-1

Timeline

  1. 21-10-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sd_read_block_characteristics() Ff the device returns page 0xb1 with length 8 (happens with qemu v2.x, for example), sd_read_block_characteristics() may attempt an out-of-bounds memory access when accessing the zoned field at offset 8.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.54%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.54% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu94 products
  • linux< 6.8.0-54.56
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1023.25
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac, < 60312ae7392f9c75c6591a52fc359cf7f810d48f | ≥ 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac, < 568c7c4c77eee6df7677bb861b7cee7398a3255d | ≥ 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac, < a776050373893e4c847a49abeae2ccb581153df0 | ≥ 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac, < 413df704f149dec585df07466d2401bbd1f490a0 | ≥ 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac, < f81eaf08385ddd474a2f41595a7757502870c0eb | 5.19
  • linux_kernel≥ 5.19, < 6.1.113 | ≥ 6.2, < 6.6.54 | ≥ 6.7, < 6.10.13 | ≥ 6.11, < 6.11.2
Debian1 product
  • linux< 6.1.115-1 | < 6.11.2-1

3 vendors · 97 products

References

25 links
Show all 25 references