NVD Vulnerability Detail

CVE-2024-46854

Summary	In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be reproduced by running $ ping -s 11 destination
Publication Date	Sept. 27, 2024, 10:15 p.m.
Registration Date	Sept. 28, 2024, 5 a.m.
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/f43190e33224c49e1c7ebbc25923ff400d87ec00	Patch
2	https://git.kernel.org/stable/c/34fcac26216ce17886af3eb392355b459367af1a	Patch
3	https://git.kernel.org/stable/c/ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2	Patch
4	https://git.kernel.org/stable/c/cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0	Patch
5	https://git.kernel.org/stable/c/1f31f51bfc8214a6deaac2920e6342cb9d019133
6	https://git.kernel.org/stable/c/38f5db5587c0ee53546b28c50ba128253181ac83
7	https://git.kernel.org/stable/c/cd5b9d657ecd44ad5f254c3fea3a6ab1cf0e2ef7
8	https://git.kernel.org/stable/c/dc43a096cfe65b5c32168313846c5cd135d08f1d

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	情報を取得される、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 11, 2024, midnight
Registration Date	Oct. 7, 2024, 12:34 p.m.
Last Update	Oct. 7, 2024, 12:34 p.m.

Affected System

Linux

Linux Kernel 4.10 以上 6.1.111 未満

Linux Kernel 6.11

Linux Kernel 6.2 以上 6.6.52 未満

Linux Kernel 6.7 以上 6.10.11 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-46854	https://www.cve.org/CVERecord?id=CVE-2024-46854
National Vulnerability Database (NVD)
2	CVE-2024-46854	https://nvd.nist.gov/vuln/detail/CVE-2024-46854

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net: dpaa: Pad packets to ETH_ZLEN (34fcac2)	https://git.kernel.org/stable/c/34fcac26216ce17886af3eb392355b459367af1a
2	net: dpaa: Pad packets to ETH_ZLEN (cbd7ec0)	https://git.kernel.org/stable/c/cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0
3	net: dpaa: Pad packets to ETH_ZLEN (ce8eabc)	https://git.kernel.org/stable/c/ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2
4	net: dpaa: Pad packets to ETH_ZLEN (f43190e)	https://git.kernel.org/stable/c/f43190e33224c49e1c7ebbc25923ff400d87ec00
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月07日] 掲載	Oct. 7, 2024, 10:26 a.m.