01 Record

CVE-2024-47756

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.21% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 12.3% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-21 12:14Z2 YR AGO

Last updated

2026-05-23 15:53Z5 MO AGO

Reserved

2024-09-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

5c0b34718d0f2ec9480815cacab934e54f017e1eac4f2f15b0bb9218227e9261

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxcfb006e185f64edbbdf7869eac352442bc76b8f6 to < 9c9afc3e75069fcfb067727973242cfbf00dd7eb, ebbdbbc580c1695dec283d0ba6448729dc993246 to < c289903b7a216df5ea6e1850ddf1b958eea9921d, 135843c351c08df72bdd4b4ebea53c8052a76881 to < dc5aeba07395c8dfa29bb878c8ce4d5180427221, af218c803fe298ddf00abef331aa526b20d7ea61 to < 23838bef2adb714ec37b2d6141dccf4a3a70bdef, 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 to < e85ab507882db165c10a858d7f685a0a38f0312e, dd47051c76c8acd8cb983f01b4d1265da29cb66a to < 72210e52e19a27f615e0b5273d2bf012d0dc318d, 86f271f22bbb6391410a07e08d6ca3757fda01fa to < 2171c5cb2fbc3e03af7e8116cd58736c09328655, 86f271f22bbb6391410a07e08d6ca3757fda01fa to < 6188a1c762eb9bbd444f47696eda77a5eae6207a, 5.4.284 to < 5.4.285, 5.10.226 to < 5.10.227, 5.15.167 to < 5.15.168, 6.1.110 to < 6.1.113, 6.6.51 to < 6.6.54, 6.10.10 to < 6.10.13, 6.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb
git.kernel.orghttps://git.kernel.org/stable/c/c289903b7a216df5ea6e1850ddf1b958eea9921d
git.kernel.orghttps://git.kernel.org/stable/c/dc5aeba07395c8dfa29bb878c8ce4d5180427221
git.kernel.orghttps://git.kernel.org/stable/c/23838bef2adb714ec37b2d6141dccf4a3a70bdef
git.kernel.orghttps://git.kernel.org/stable/c/e85ab507882db165c10a858d7f685a0a38f0312e
git.kernel.orghttps://git.kernel.org/stable/c/72210e52e19a27f615e0b5273d2bf012d0dc318d
git.kernel.orghttps://git.kernel.org/stable/c/2171c5cb2fbc3e03af7e8116cd58736c09328655
git.kernel.orghttps://git.kernel.org/stable/c/6188a1c762eb9bbd444f47696eda77a5eae6207a
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.115-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.11.2-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.11.2-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.