{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-36020",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-36020",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-05-30T14:59:44.447Z",
    "updatedAt": "2026-10-15T00:42:15.907Z",
    "importedAt": "2026-10-24T01:57:11.582Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "i40e: fix vf may be used uninitialized in this function warning",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix vf may be used uninitialized in this function warning\n\nTo fix the regression introduced by commit 52424f974bc5, which causes\nservers hang in very hard to reproduce conditions with resets races.\nUsing two sources for the information is the root cause.\nIn this function before the fix bumping v didn't mean bumping vf\npointer. But the code used this variables interchangeably, so stale vf\ncould point to different/not intended vf.\n\nRemove redundant \"v\" variable and iterate via single VF pointer across\nwhole function instead to guarantee VF pointer validity.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "76ed715836c6994bac29d9638e9314e6e3b08651",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d"
            },
            {
              "version": "e88c2a1e28c5475065563d66c07ca879a9afbd07",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9dcf0fcb80f6aeb01469e3c957f8d4c97365450a"
            },
            {
              "version": "9abae363af5ced6adbf04c14366289540281fb26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b8e82128b44fa40bf99a50b919488ef361e1683c"
            },
            {
              "version": "c39de3ae5075ea5f78e097cb5720d4e52d5caed9",
              "status": "affected",
              "versionType": "git",
              "lessThan": "951d2748a2a8242853abc3d0c153ce4bf8faad31"
            },
            {
              "version": "52424f974bc53c26ba3f00300a00e9de9afcd972",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3e89846283f3cf7c7a8e28b342576fd7c561d2ba"
            },
            {
              "version": "52424f974bc53c26ba3f00300a00e9de9afcd972",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0dcf573f997732702917af1563aa2493dc772fc0"
            },
            {
              "version": "52424f974bc53c26ba3f00300a00e9de9afcd972",
              "status": "affected",
              "versionType": "git",
              "lessThan": "06df7618f591b2dc43c59967e294d7b9fc8675b6"
            },
            {
              "version": "52424f974bc53c26ba3f00300a00e9de9afcd972",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f37c4eac99c258111d414d31b740437e1925b8e8"
            },
            {
              "version": "02f949747e6fb767b29f7931d4bbf40911684e7a",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "4.19.264",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.19.312"
            },
            {
              "version": "5.4.223",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.4.274"
            },
            {
              "version": "5.10.153",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.10.215"
            },
            {
              "version": "5.15.77",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.15.154"
            },
            {
              "version": "6.0.7",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "6.1"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "6.1",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "6.1"
            },
            {
              "version": "4.19.312",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.274",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.215",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.154",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.85",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.26",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.8.5",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.8.*"
            },
            {
              "version": "6.9",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}