CVE-2024-46861

usbnet: ipheth: do not stop RX on failing RX callback

published September 27, 2024

CVSS
—
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

* Payload too short

* Payload formatted incorrecly (e.g. bad NCM framing)

* Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further

incoming URBs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2024-09-27T12:42Z
EPSS history
Timeline
  • 27 SEP 12:42Z
    usbnet: ipheth: do not stop RX on failing RX callback
    cvelistv5