NetSight
IP …
high7.0

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls soc…

Impact

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.4.267
from 5.5 before 5.10.208
from 5.11 before 5.15.147
from 5.16 before 6.1.69
from 6.2 before 6.6.7
Version 6.7
RedhatEnterprise Linux
Versions 8.0, 9.0

Weakness classification

CWE-787

References