CVE-2024-0646: High Fixes for in Linux Kernel
First published: Sun Dec 10 2023(Updated: )
A flaw in the Linux Kernel found. When splice() is called with a ktls socket as destination, the ktls code fails to update the internal "curr"/"copybreak" accounting that tracks which parts of the plaintext scatter-gather buffer (`struct sk_msg_sg`) are unused writable memory. This can cause subsequent writes to the socket to overwrite the contents of spliced pages, including pages from files to which the caller is not supposed to have write access. Reference: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267</a>
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <6.7 | 6.7 |
| IBM QRadar SIEM | <=7.5 - 7.5.0 UP8 IF01 | |
| Linux Linux kernel | >=4.20<5.4.267 | |
| Linux Linux kernel | >=5.5<5.10.208 | |
| Linux Linux kernel | >=5.11<5.15.147 | |
| Linux Linux kernel | >=5.16<6.1.69 | |
| Linux Linux kernel | >=6.2<6.6.7 | |
| Linux Linux kernel | =6.7-rc1 | |
| Linux Linux kernel | =6.7-rc2 | |
| Linux Linux kernel | =6.7-rc3 | |
| Linux Linux kernel | =6.7-rc4 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux | =9.0 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.112-1 6.11.7-1 6.11.9-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://chromereleases.googleblog.com/2024/03/long-term-support-channel-update-for.html (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=2253908
- https://access.redhat.com/security/cve/CVE-2024-0646
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267
- https://access.redhat.com/errata/RHSA-2024:0723
- https://access.redhat.com/errata/RHSA-2024:0724
- https://access.redhat.com/errata/RHSA-2024:0725
- https://access.redhat.com/errata/RHSA-2024:0850
- https://access.redhat.com/errata/RHSA-2024:0851
- https://access.redhat.com/errata/RHSA-2024:0876
- https://access.redhat.com/errata/RHSA-2024:0881
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/errata/RHSA-2024:1248
- https://access.redhat.com/errata/RHSA-2024:1250
- https://access.redhat.com/errata/RHSA-2024:1251
- https://access.redhat.com/errata/RHSA-2024:1253
- https://access.redhat.com/errata/RHSA-2024:1268
- https://access.redhat.com/errata/RHSA-2024:1269
- https://access.redhat.com/errata/RHSA-2024:1278
- https://access.redhat.com/errata/RHSA-2024:1306
- https://access.redhat.com/errata/RHSA-2024:1367
- https://access.redhat.com/errata/RHSA-2024:1368
- https://access.redhat.com/errata/RHSA-2024:1377
- https://access.redhat.com/errata/RHSA-2024:1382
- https://access.redhat.com/errata/RHSA-2024:1404
- https://launchpad.net/bugs/cve/CVE-2024-0646
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2258817
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2259000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/279830
- https://www.ibm.com/support/pages/node/7150684 (Advisory)
- https://access.redhat.com/errata/RHSA-2024:2094
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0646
- https://nvd.nist.gov/vuln/detail/CVE-2024-0646
- https://security-tracker.debian.org/tracker/CVE-2024-0646
- https://ubuntu.com/security/CVE-2024-0646
- https://git.kernel.org/linus/c5a595000e2677e865a39f249c056bc05d6e55fd
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- agent/type
- agent/first-publish-date
- agent/weakness
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/remedy
- agent/author
- collector/chrome-releases
- agent/title
- agent/severity
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-0646
- agent/software-canonical-lookup
- collector/ibm-support
- source/IBM
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- package-manager/redhat
- vendor/ibm
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5 - 7.5.0 up8 if01
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/4.20
- version/linux linux kernel/5.5
- version/linux linux kernel/5.11
- version/linux linux kernel/5.16
- version/linux linux kernel/6.2
- version/linux linux kernel/6.7-rc1
- version/linux linux kernel/6.7-rc2
- version/linux linux kernel/6.7-rc3
- version/linux linux kernel/6.7-rc4
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.0
- version/redhat enterprise linux/9.0
- package-manager/debian