CVE-2024-36946

phonet: fix rtm_phonet_notify() skb allocation

published May 30, 2024

CVSS
—
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

phonet: fix rtm_phonet_notify() skb allocation

fill_route() stores three components in the skb:

- struct rtmsg

- RTA_DST (u8)

- RTA_OIF (u32)

Therefore, rtm_phonet_notify() should use

NLMSG_ALIGN(sizeof(struct rtmsg)) +

nla_total_size(1) +

nla_total_size(4)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Published
2024-05-30T15:35Z
EPSS history
Timeline
  • 30 MAY 15:35Z
    phonet: fix rtm_phonet_notify() skb allocation
    cvelistv5