Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0024 15.1 —
AFFECTED Product Versions Fixed Linux cafe563591446cf80bfbc2fe3bc72a2e36cf1060 – — Linux 3.10 – 5.10.221
TIMELINE Jun 25 Reserved by Linux Jul 5 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-39482 (Linux). CVSS 7.8 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either allocated on the stack with a fixed size MAX_BSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the struct had a fixed-length array of size MAX_BSETS which was indexed out-of-bounds for the dynamically-sized iterators, which causes UBSAN to complain. This patch uses the same approach as in bcachefs's sort_iter and splits the iterator into a btree_iter with a flexible array member and a btree_iter_stack which embeds a btree_iter as well as a fixed-length data array.
| Date | Event | Detail |
|---|---|---|
| June 25, 2024 | Reserved | Reserved by Linux |
| July 5, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-39482 (Linux). CVSS 7.8 → 5.5 (NVD). |
Authoritative record: CVE-2024-39482 at cve.org
Vendors: linux
Weaknesses: CWE-770
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-39482 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.