CVE detail
CVE-2024-36020
In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the information is the root cause. In this function before the fix bumping v didn't mean bumping vf pointer. But the code used this variables interchangeably, so stale vf could point to different/not intended vf. Remove redundant "v" variable and iterate via single VF pointer across whole function instead to guarantee VF pointer validity.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
11 source links · newest first
- https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comMay 30, 2024, 3:15 PM No excerpt available.
Vendor Advisorylists.debian.orgMay 30, 2024, 3:15 PMNo excerpt available.
Vendor Advisorylists.debian.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PMNo excerpt available.
Exploitgit.kernel.orgMay 30, 2024, 3:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-39812CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialize…
- CVE-2025-39684CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN ker…
- CVE-2025-38718CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist wit…
- CVE-2025-38691CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. Wh…
- CVE-2025-38644CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a WARN in ieee80211_td…
- CVE-2025-38608CVSS 8.6 · High
In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initiall…