CVE-2024-0646
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
29/100
Published: 2024-01-17
Modified: 2026-11-04
First seen: 2026-11-04
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| — | — | 0 < 6.7-rc5 |
| linux | linux_kernel | 4.20 – 5.4.267 |
| linux | linux_kernel | 6.7 |
| linux | linux_kernel | 6.7 |
| linux | linux_kernel | 6.7 |
| linux | linux_kernel | 6.7 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
References & Advisories (26)
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Patch
Issue Tracking
Patch
Showing 25 of 26 references