{
  "cveId": "CVE-2024-41052",
  "url": "https://patchblox.com/security/cve/CVE-2024-41052",
  "summary": "CVE-2024-41052 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-41052, released July 29, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Init the count variable in collecting...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Init the count variable in collecting hot-reset devices  The count variable is used without initialization, it results in mistakes in the device counting and crashes the userspace if the get hot reset info path is triggered.",
  "published": "2024-07-29T15:15:13Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00272,
  "epssPercentile": 0.19623,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.9.10-1",
      "fix": "DEBIAN-CVE-2024-41052",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41052",
      "released": "2024-07-29T15:15:13Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.9.10-1",
      "fix": "DEBIAN-CVE-2024-41052",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41052",
      "released": "2024-07-29T15:15:13Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}