CVE-2024-36946
phonet: fix rtm_phonet_notify() skb allocation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: • struct rtmsg • RTA_DST (u8) • RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.33
References 8
git.kernel.org
- stable/c/ec1f71c05caeba0f814df77e0f511d8b4618623a
- stable/c/dc6beac059f0331de97155a89d84058d4a9e49c7
- stable/c/f085e02f0a32f6dfcfabc6535c9c4a1707cef86b
- stable/c/4ff334cade9dae50e4be387f71e94fae634aa9b4
- stable/c/728a83160f98ee6b60df0d890141b9b7240182fe
- stable/c/ee9e39a6cb3ca2a3d35b4ae25547ee3526a44d00
- stable/c/9a77226440008cf04ba68faf641a2d50f4998137
- stable/c/d8cac8568618dcb8a51af3db1103e8d4cc4aeea7