Answer in brief
CVE-2024-36288 records a Unknown severity vulnerability in SUNRPC: Fix loop termination condition in gss_free_in_token_pages(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ab8466d4e26806a4ae82c282762c4545eecf45ef <57ff6c0a175930856213b2aa39f8c845a53e5b1c || >=4420b73c7f26fd5fcb37bbce5313dd356ef1b3ca <6ed45d20d30005bed94c8c527ce51d5ad8121018 || >=f148a95f68c66c1b097391b68e153d5a46f0e780 <4cefcd0af7458bdeff56a9d8dfc6868ce23d128a || >=fe0b474974fee7af1df286e0edd5a1460c811865 <b4878ea99f2b40ef1925720b1b4ca7f4af1ba785 || >=c1d8c429e4d2ce85ec5c92cf71cb419baf75c56f <af628d43a822b78ad8d4a58d8259f8bf8bc71115 || >=8ca148915670a2921afcc255af9e1dc80f37b052 <0a1cb0c6102bb4fd310243588d39461da49497ad || >=bafa6b4d95d97877baa61883ff90f7e374427fae <4a77c3dead97339478c7422eb07bf4bf63577008 || a3c1afd5d7ad59e34a275d80c428952f83c8c1f0 || >=6.8.12 <6.9 | 57ff6c0a175930856213b2aa39f8c845a53e5b1c, 6ed45d20d30005bed94c8c527ce51d5ad8121018, 4cefcd0af7458bdeff56a9d8dfc6868ce23d128a, b4878ea99f2b40ef1925720b1b4ca7f4af1ba785, af628d43a822b78ad8d4a58d8259f8bf8bc71115, 0a1cb0c6102bb4fd310243588d39461da49497ad, 4a77c3dead97339478c7422eb07bf4bf63577008, 6.9 |
| Linux/Linuxgeneric | >=6.9.3 <6.9.4 | 6.9.4 |
| Siemens/RUGGEDCOM RST2428Pgeneric | >=0 <V3.1 | V3.1 |
| Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 familygeneric | >=0 <V3.1 | V3.1 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Jun 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]
Quoted source text, attributed separately from HOL analysis.