{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-39499",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-39499",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-07-12T12:20:33.658Z",
    "updatedAt": "2026-05-11T20:21:44.632Z",
    "importedAt": "2026-10-24T01:57:16.009Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "vmci: prevent speculation leaks by sanitizing event in event_deliver()",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmci: prevent speculation leaks by sanitizing event in event_deliver()\n\nCoverity spotted that event_msg is controlled by user-space,\nevent_msg->event_data.event is passed to event_deliver() and used\nas an index without sanitization.\n\nThis change ensures that the event index is sanitized to mitigate any\npossibility of speculative information leaks.\n\nThis bug was discovered and resolved using Coverity Static Analysis\nSecurity Testing (SAST) by Synopsys, Inc.\n\nOnly compile tested, no access to HW.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "58730dfbd4ae01c1b022b0d234a8bf8c02cdfb81"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "681967c4ff210e06380acf9b9a1b33ae06e77cbd"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f70ff737346744633e7b655c1fb23e1578491ff3"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "95ac3e773a1f8da83c4710a720fbfe80055aafae"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "95bac1c8bedb362374ea1937b1d3e833e01174ee"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e293c6b38ac9029d76ff0d2a6b2d74131709a9a8"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "757804e1c599af5d2a7f864c8e8b2842406ff4bb"
            },
            {
              "version": "1d990201f9bb499b7c76ab00abeb7e803c0bcb2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "8003f00d895310d409b2bf9ef907c56b42a4e0f4"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.9",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.9"
            },
            {
              "version": "4.19.317",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.279",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.221",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.162",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.95",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.35",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.9.6",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.9.*"
            },
            {
              "version": "6.10",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}