{"id":"CVE-2024-0646","state":"PUBLISHED","title":"Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination","description":"An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.","publishedAt":"2024-01-17T15:16:45.148Z","updatedAt":"2026-08-06T22:24:42.795Z","severity":{"score":7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"redhat"},"assigner":"redhat","products":["kernel","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support","Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service","Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service","Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support","Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support","Red Hat Red Hat Enterprise Linux 9","Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support","Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support","Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","Red Hat RHOL-5.8-RHEL-9","Red Hat Red Hat Enterprise Linux 6","Red Hat Red Hat Enterprise Linux 7"],"affected":[{"packageName":"kernel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.7-rc5","versionType":"semver"}],"collectionURL":"https://git.kernel.org/pub/scm/linux/kernel"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-513.18.1.rt7.320.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::nfv","cpe:/a:redhat:enterprise_linux:8::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-513.18.1.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.rt13.179.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.2::nfv","cpe:/a:redhat:rhel_tus:8.2::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.rt7.201.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.4::nfv","cpe:/a:redhat:rhel_tus:8.4::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-372.91.1.el8_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-477.51.1.el8_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::crb","cpe:/o:redhat:rhel_eus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-362.24.1.el9_3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-362.24.1.el9_3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-70.93.2.el9_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream","cpe:/a:redhat:rhel_eus:9.0::crb","cpe:/o:redhat:rhel_eus:9.0::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:5.14.0-70.93.1.rt21.165.el9_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::nfv","cpe:/a:redhat:rhel_eus:9.0::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:9.0::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-284.52.1.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream","cpe:/a:redhat:rhel_eus:9.2::crb","cpe:/o:redhat:rhel_eus:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:5.14.0-284.52.1.rt14.337.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::nfv","cpe:/a:redhat:rhel_eus:9.2::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-372.91.1.el8_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/cluster-logging-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-22","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/cluster-logging-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-11","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch6-rhel9","defaultStatus":"affected","versions":[{"version":"v6.8.1-407","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-19","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"v1.0.0-479","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-7","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/eventrouter-rhel9","defaultStatus":"affected","versions":[{"version":"v0.4.0-247","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/fluentd-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.6-5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/log-file-metric-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v1.1.0-227","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-curator5-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.1-470","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-loki-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9.6-14","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-view-plugin-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.6-2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/loki-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/loki-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/lokistack-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"v0.1.0-525","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/opa-openshift-rhel9","defaultStatus":"affected","versions":[{"version":"v0.1.0-224","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/vector-rhel9","defaultStatus":"affected","versions":[{"version":"v0.28.1-56","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]}],"references":["https://access.redhat.com/errata/RHSA-2024:0723","https://access.redhat.com/errata/RHSA-2024:0724","https://access.redhat.com/errata/RHSA-2024:0725","https://access.redhat.com/errata/RHSA-2024:0850","https://access.redhat.com/errata/RHSA-2024:0851","https://access.redhat.com/errata/RHSA-2024:0876","https://access.redhat.com/errata/RHSA-2024:0881","https://access.redhat.com/errata/RHSA-2024:0897","https://access.redhat.com/errata/RHSA-2024:1248","https://access.redhat.com/errata/RHSA-2024:1250","https://access.redhat.com/errata/RHSA-2024:1251","https://access.redhat.com/errata/RHSA-2024:1253","https://access.redhat.com/errata/RHSA-2024:1268","https://access.redhat.com/errata/RHSA-2024:1269","https://access.redhat.com/errata/RHSA-2024:1278","https://access.redhat.com/errata/RHSA-2024:1306","https://access.redhat.com/errata/RHSA-2024:1367","https://access.redhat.com/errata/RHSA-2024:1368","https://access.redhat.com/errata/RHSA-2024:1377","https://access.redhat.com/errata/RHSA-2024:1382","https://access.redhat.com/errata/RHSA-2024:1404","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0646","https://bugzilla.redhat.com/show_bug.cgi?id=2253908","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267","https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/0xxx/CVE-2024-0646.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-0646","state":"PUBLISHED","datePublished":"2024-01-17T15:16:45.148Z","dateUpdated":"2026-08-06T22:24:42.795Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2024-01-17T13:11:12.669Z"},"containers":{"cna":{"title":"Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination","descriptions":[{"lang":"en","value":"An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system."}],"affected":[{"packageName":"kernel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.7-rc5","versionType":"semver"}],"collectionURL":"https://git.kernel.org/pub/scm/linux/kernel"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-513.18.1.rt7.320.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::nfv","cpe:/a:redhat:enterprise_linux:8::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-513.18.1.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.rt13.179.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.2::nfv","cpe:/a:redhat:rhel_tus:8.2::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-193.128.1.el8_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos","cpe:/o:redhat:rhel_e4s:8.2::baseos","cpe:/o:redhat:rhel_tus:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_e4s:8.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.rt7.201.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.4::nfv","cpe:/a:redhat:rhel_tus:8.4::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-305.125.1.el8_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_e4s:8.4::baseos","cpe:/o:redhat:rhel_tus:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_e4s:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-372.91.1.el8_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:8.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-477.51.1.el8_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::crb","cpe:/o:redhat:rhel_eus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-362.24.1.el9_3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-362.24.1.el9_3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::nfv","cpe:/a:redhat:enterprise_linux:9::realtime","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-70.93.2.el9_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream","cpe:/a:redhat:rhel_eus:9.0::crb","cpe:/o:redhat:rhel_eus:9.0::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:5.14.0-70.93.1.rt21.165.el9_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::nfv","cpe:/a:redhat:rhel_eus:9.0::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:9.0::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-284.52.1.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream","cpe:/a:redhat:rhel_eus:9.2::crb","cpe:/o:redhat:rhel_eus:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kernel-rt","defaultStatus":"affected","versions":[{"version":"0:5.14.0-284.52.1.rt14.337.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::nfv","cpe:/a:redhat:rhel_eus:9.2::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","packageName":"kpatch-patch","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_eus:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:4.18.0-372.91.1.el8_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::crb","cpe:/o:redhat:rhel_eus:8.6::baseos","cpe:/o:redhat:rhev_hypervisor:4.4::el8"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/cluster-logging-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-22","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/cluster-logging-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-11","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch6-rhel9","defaultStatus":"affected","versions":[{"version":"v6.8.1-407","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-19","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"v1.0.0-479","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/elasticsearch-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-7","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/eventrouter-rhel9","defaultStatus":"affected","versions":[{"version":"v0.4.0-247","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/fluentd-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.6-5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/log-file-metric-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v1.1.0-227","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-curator5-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.1-470","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-loki-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9.6-14","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/logging-view-plugin-rhel9","defaultStatus":"affected","versions":[{"version":"v5.8.6-2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/loki-operator-bundle","defaultStatus":"affected","versions":[{"version":"v5.8.6-24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/loki-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v5.8.6-10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/lokistack-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"v0.1.0-525","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/opa-openshift-rhel9","defaultStatus":"affected","versions":[{"version":"v0.1.0-224","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"RHOL-5.8-RHEL-9","packageName":"openshift-logging/vector-rhel9","defaultStatus":"affected","versions":[{"version":"v0.28.1-56","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:5.8::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0723","name":"RHSA-2024:0723","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0724","name":"RHSA-2024:0724","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0725","name":"RHSA-2024:0725","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0850","name":"RHSA-2024:0850","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0851","name":"RHSA-2024:0851","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0876","name":"RHSA-2024:0876","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0881","name":"RHSA-2024:0881","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0897","name":"RHSA-2024:0897","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1248","name":"RHSA-2024:1248","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1250","name":"RHSA-2024:1250","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1251","name":"RHSA-2024:1251","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1253","name":"RHSA-2024:1253","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1268","name":"RHSA-2024:1268","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1269","name":"RHSA-2024:1269","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1278","name":"RHSA-2024:1278","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1306","name":"RHSA-2024:1306","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1367","name":"RHSA-2024:1367","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1368","name":"RHSA-2024:1368","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1377","name":"RHSA-2024:1377","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1382","name":"RHSA-2024:1382","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","name":"RHSA-2024:1404","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","name":"RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0646","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253908","name":"RHBZ#2253908","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267"}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-08-06T22:24:42.795Z"},"datePublic":"2023-12-07T06:30:00.000Z","x_redhatCweChain":"CWE-787: Out-of-bounds Write","workarounds":[{"lang":"en","value":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"timeline":[{"lang":"en","time":"2024-01-17T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2023-12-07T06:30:00.000Z","value":"Made public."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0723","name":"RHSA-2024:0723","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0724","name":"RHSA-2024:0724","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0725","name":"RHSA-2024:0725","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0850","name":"RHSA-2024:0850","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0851","name":"RHSA-2024:0851","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0876","name":"RHSA-2024:0876","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0881","name":"RHSA-2024:0881","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0897","name":"RHSA-2024:0897","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1248","name":"RHSA-2024:1248","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1250","name":"RHSA-2024:1250","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1251","name":"RHSA-2024:1251","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1253","name":"RHSA-2024:1253","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1268","name":"RHSA-2024:1268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1269","name":"RHSA-2024:1269","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1278","name":"RHSA-2024:1278","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1306","name":"RHSA-2024:1306","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1367","name":"RHSA-2024:1367","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1368","name":"RHSA-2024:1368","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1377","name":"RHSA-2024:1377","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1382","name":"RHSA-2024:1382","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","name":"RHSA-2024:1404","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","name":"RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0646","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253908","name":"RHBZ#2253908","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:11:35.718Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-0646","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-05-10T04:00:15.716357Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-17T21:19:19.245Z"}}]}}}