Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 162 bronnen 1 kritiek 21 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2024-46854

HIGH · 7.1 CVSS Gepubliceerd:

Beschrijving

In the Linux kernel, the following vulnerability has been resolved:

net: dpaa: Pad packets to ETH_ZLEN

When sending packets under 60 bytes, up to three bytes of the buffer
following the data may be leaked. Avoid this by extending all packets to
ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be
reproduced by running

$ ping -s 11 destination

Vendors

Linux

Affected products

Linux Kernel

References