Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-46854

net: dpaa: Pad packets to ETH_ZLEN

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.111, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be reproduced by running $ ping -s 11 destination

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in cd5b9d657ecd44ad5f254c3fea3a6ab1cf0e2ef7; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in dc43a096cfe65b5c32168313846c5cd135d08f1d; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in 1f31f51bfc8214a6deaac2920e6342cb9d019133; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in 38f5db5587c0ee53546b28c50ba128253181ac83; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in f43190e33224c49e1c7ebbc25923ff400d87ec00; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in 34fcac26216ce17886af3eb392355b459367af1a; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2; From 9ad1a37493338cacf04e2c93acf44d151a7adda8 · fixed in cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0

  • Linux Linux

    4.10

  • KernelLinux

    From 4.10.0 · fixed in 4.19.323; From 4.20.0 · fixed in 5.4.285; From 5.5.0 · fixed in 5.10.227; From 5.11.0 · fixed in 5.15.168; From 5.16.0 · fixed in 6.1.111; From 6.2.0 · fixed in 6.6.52; From 6.7.0 · fixed in 6.10.11

References 8

git.kernel.org