VYPR
← All advisories
High severity7.1NVD Advisory· Published Sep 27, 2024· Updated May 12, 2026

CVE-2024-46854

CVE-2024-46854

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dpaa: Pad packets to ETH_ZLEN

When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be reproduced by running

$ ping -s 11 destination

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

An information leak in the Linux kernel's dpaa network driver when sending short (<60 byte) packets is fixed by padding to ETH_ZLEN.

Vulnerability

An information disclosure vulnerability exists in the Linux kernel's Freescale QorIQ Data Path Acceleration Architecture (DPAA) network driver. When transmitting packets smaller than the Ethernet minimum frame length (60 bytes, defined as ETH_ZLEN), up to three bytes of memory following the actual packet data buffer could be leaked onto the wire [1]. This occurs because the driver did not pad short packets to the required minimum frame size before transmission.

Exploitation

An attacker on the same local network segment can trigger the leak by sending targeted network traffic that results in transmission of undersized frames. A simple method to reproduce the issue is running the ping command with a payload small enough that the resulting IP packet is shorter than 46 bytes (e.g., ping -s 11 destination) [1]. No authentication is required to send or receive network frames, but the attacker must be able to observe the transmitted packets to capture the leaked data.

Impact

The vulnerability allows a remote attacker to obtain up to three bytes of kernel memory from the transmitting system. This memory may contain sensitive information such as fragments of network buffers, cryptographic keys, or other data previously stored in that memory region. The CVSS v3 base score is 7.1 (High), indicating significant confidentiality impact with low attack complexity [1].

Mitigation

The fix was applied upstream in the Linux kernel by adding explicit padding to ETH_ZLEN for all transmitted packets [1]. Systems running an updated kernel are protected. The Siemens advisory SSA-265688 [1] lists this CVE among many other kernel vulnerabilities affecting the SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, where a firmware update is the recommended remediation. Users should apply the latest kernel updates from their distribution or vendor.

References
  1. SSA-265688

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

164

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.