Lucene search

K
redhatcveRedhat.comRH:CVE-2024-36946
HistoryJun 03, 2024 - 12:03 p.m.

CVE-2024-36946

2024-06-0312:03:03
redhat.com
access.redhat.com
2
cve-2024-36946
linux kernel
phonet
rtm_phonet_notify
skb allocation
rta_dst
rta_oif

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.0%

In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.0%