CVE-2024-46719

5.5 · MEDIUM

Published Sep 18, 2024 linux CWE-476 EPSS 0.24% (15th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-46719 is a medium-severity vulnerability affecting linux linux_kernel. It was published on September 18, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: Fix null pointer dereference in trace

ucsi_register_altmode checks IS_ERR for the alt pointer and treats

NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled,

ucsi_register_displayport returns NULL which causes a NULL pointer

dereference in trace. Rather than return NULL, call

typec_port_register_altmode to register DisplayPort alternate mode

as a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 0, < 5.4.284	Affected

References

Ref git.kernel.org/stable/c/3aa56313b0de06ce1911950b2cc0c269614a87a9 Ref git.kernel.org/stable/c/3b9f2d9301ae67070fe77a0c06758722fd7172b7 Ref git.kernel.org/stable/c/7e64cabe81c303bdf6fd26b6a09a3289b33bc870 Ref git.kernel.org/stable/c/8095bf0579ed4906a33f7bec675bfb29b6b16a3b Ref git.kernel.org/stable/c/99331fe68a8eaa4097143a33fb0c12d5e5e8e830 Ref git.kernel.org/stable/c/99516f76db48e1a9d54cdfed63c1babcee4e71a5 Ref git.kernel.org/stable/c/b4243c05d7e3db0bdbf9124e6fa59b4ca7c807ae Ref lists.debian.org/debian-lts-announce/2024/10/msg00003.html Ref lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Frequently Asked Questions

What is CVE-2024-46719?

CVE-2024-46719 is a medium-severity vulnerability affecting linux linux_kernel. It was published on September 18, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-46719?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-46719?

How can CyberStrike help with CVE-2024-46719?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-46719 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719