High severity7.0NVD Advisory· Published Jan 17, 2024· Updated Aug 6, 2026
CVE-2024-0646
CVE-2024-0646
Description
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
34(expand)+ 5 more
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.20,<5.4.267
- cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords25 versionspkg:deb/ubuntu/[email protected]?arch=source&distro=manticpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perf
< 6.5.0-1015.15+ 24 more
- (no CPE)range: < 6.5.0-1015.15
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
- (no CPE)range: < 4.18.0-513.18.1.el8_9
Patches
Vulnerability mechanics
References
26- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatch
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/nvdPatch
- access.redhat.com/errata/RHSA-2024:0723nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0724nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0725nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0850nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0851nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0876nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0881nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:0897nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1248nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1250nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1251nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1253nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1268nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1269nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1278nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1306nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1367nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1368nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1377nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1382nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:1404nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2024:2094nvdThird Party Advisory
- access.redhat.com/security/cve/CVE-2024-0646nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlnvd
News mentions
0No linked articles in our index yet.