Description

In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)

INFO

Published Date :

2024-05-30T15:35:43.884Z

Last Modified :

2025-05-04T09:12:36.121Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-36946 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-36946.

URL Resource
https://git.kernel.org/stable/c/4ff334cade9dae50e4be387f71e94fae634aa9b4 cve-icon cve-icon
https://git.kernel.org/stable/c/728a83160f98ee6b60df0d890141b9b7240182fe cve-icon cve-icon
https://git.kernel.org/stable/c/9a77226440008cf04ba68faf641a2d50f4998137 cve-icon cve-icon
https://git.kernel.org/stable/c/d8cac8568618dcb8a51af3db1103e8d4cc4aeea7 cve-icon cve-icon
https://git.kernel.org/stable/c/dc6beac059f0331de97155a89d84058d4a9e49c7 cve-icon cve-icon
https://git.kernel.org/stable/c/ec1f71c05caeba0f814df77e0f511d8b4618623a cve-icon cve-icon
https://git.kernel.org/stable/c/ee9e39a6cb3ca2a3d35b4ae25547ee3526a44d00 cve-icon cve-icon
https://git.kernel.org/stable/c/f085e02f0a32f6dfcfabc6535c9c4a1707cef86b cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024053039-CVE-2024-36946-3087@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-36946 cve-icon
https://security.netapp.com/advisory/ntap-20241004-0002/ cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-36946 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact