CVE-2024-46861: usbnet: ipheth: do not stop RX on failing RX callback
In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: do not stop RX on failing RX callback
RX callbacks can fail for multiple reasons:
Payload too short Payload formatted incorrecly (e.g. bad NCM framing) Lack of memory
None of these should cause the driver to seize up.
Make such failures non-critical and continue processing further incoming URBs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46861?
CVE-2024-46861 has a severity rating that may vary depending on the specific implementation and usage context in affected systems.
How do I fix CVE-2024-46861?
To remediate CVE-2024-46861, upgrade your Linux kernel to version 6.12.11-1 or above.
Which Linux kernel versions are affected by CVE-2024-46861?
CVE-2024-46861 affects Linux kernel versions up to 6.6.52 and from 6.7 to 6.11-rc3.
What type of vulnerabilities does CVE-2024-46861 address?
CVE-2024-46861 addresses issues related to failing RX callbacks in usbnet and ipheth drivers when processing network packets.
Is CVE-2024-46861 a remote code execution vulnerability?
CVE-2024-46861 does not specifically indicate a remote code execution vulnerability but involves callback failures that could affect network stability.