CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN
In the Linux kernel, the following vulnerability has been resolved:
net: dpaa: Pad packets to ETHZLEN
When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETHZLEN, ensuring nothing is leaked in the padding. This bug can be reproduced by running
$ ping -s 11 destination
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46854?
CVE-2024-46854 has a severity rating that indicates the potential impact on system security due to packet leakage.
How do I fix CVE-2024-46854?
To fix CVE-2024-46854, update your Linux kernel to a version that has addressed this vulnerability, such as 6.1.123-1 or higher.
Which versions of the Linux kernel are affected by CVE-2024-46854?
CVE-2024-46854 affects various versions of the Linux kernel, including those from 4.10 up to 6.11 including release candidates.
Can CVE-2024-46854 lead to data leakage?
Yes, CVE-2024-46854 can lead to data leakage when sending packets under 60 bytes due to uninitialized memory being exposed.
What is the main issue caused by CVE-2024-46854?
The main issue caused by CVE-2024-46854 is that it allows for the potential leakage of up to three bytes of data in certain packets.