{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-36883",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-36883",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-05-30T15:28:53.302Z",
    "updatedAt": "2026-08-05T11:31:49.005Z",
    "importedAt": "2026-10-24T01:57:11.582Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "net: fix out-of-bounds access in ops_init",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix out-of-bounds access in ops_init\n\nnet_alloc_generic is called by net_alloc, which is called without any\nlocking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It\nis read twice, first to allocate an array, then to set s.len, which is\nlater used to limit the bounds of the array access.\n\nIt is possible that the array is allocated and another thread is\nregistering a new pernet ops, increments max_gen_ptrs, which is then used\nto set s.len with a larger than allocated length for the variable array.\n\nFix it by reading max_gen_ptrs only once in net_alloc_generic. If\nmax_gen_ptrs is later incremented, it will be caught in net_assign_generic.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3cdc34d76c4f777579e28ad373979d36c030cfd3"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "7b0e64583eab8c1d896b47e5dd0bf2e7d86ec41f"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0c3248bc708a7797be573214065cf908ff1f54c7"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9518b79bfd2fbf99fa9b7e8e36bcb1825e7ba030"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2d60ff5874aefd006717ca5e22ac1e25eac29c42"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b6dbfd5bcc267a95a0bf1bf96af46243f96ec6cd"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f4f94587e1bf87cb40ec33955a9d90148dd026ab"
            },
            {
              "version": "073862ba5d249c20bd5c49fc6d904ff0e1f6a672",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a26ff37e624d12e28077e5b24d2b264f62764ad6"
            },
            {
              "version": "561331eae0a03d0c4cf60f3cf485aa3e8aa5ab48",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "a2c82f7bee1ffa9eafa1fb0bd886a7eea8c9e497",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "3.0.19",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "3.1"
            },
            {
              "version": "3.2.3",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "3.3"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.3",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.3"
            },
            {
              "version": "4.19.314",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.276",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.217",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.159",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.91",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.31",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.8.10",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.8.*"
            },
            {
              "version": "6.9",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}