Yüksek CVSS 7.8

CVE-2024-0646: Linux Kernel: sınır dışı yazma

Yayın: 17 Ocak 2024 19:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,31 (yüzdelik 24)
CWE: CWE-787
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	4.20	—	5.4.267
linux-linux-kernel	5.5	—	5.10.208
linux-linux-kernel	5.11	—	5.15.147
linux-linux-kernel	5.16	—	6.1.69
linux-linux-kernel	6.2	—	6.6.7
linux-linux-kernel	6.7	6.7	—
linux-linux-kernel	6.7	6.7	—
linux-linux-kernel	6.7	6.7	—
linux-linux-kernel	6.7	6.7	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları