CVE-2024-46861

MEDIUM

Linux Kernel < 6.6.52 - Denial of Service via USBnet RX Callback Failure

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for multiple reasons: * Payload too short * Payload formatted incorrecly (e.g. bad NCM framing) * Lack of memory None of these should cause the driver to seize up. Make such failures non-critical and continue processing further incoming URBs.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/4d1cfa3afb8627435744ecdc6d8b58bc72ee0f4c

Patch

https://git.kernel.org/stable/c/08ca800b0cd56d5e26722f68b18bbbf6840bf44b

Patch

https://git.kernel.org/stable/c/74efed51e0a4d62f998f806c307778b47fc73395

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 10.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (12)

linux/Kernel 6.5.0 - 6.6.52linux

linux/Kernel 6.7.0 - 6.10.11linux

Linux/Linux < 6.5

Linux/Linux 6.10.11 - 6.10.*

Linux/Linux 6.11

Linux/Linux 6.5

Linux/Linux 6.6.52 - 6.6.*

Linux/Linux a2d274c62e44b1995c170595db3865c6fe701226 - 08ca800b0cd56d5e26722f68b18bbbf6840bf44b

Linux/Linux a2d274c62e44b1995c170595db3865c6fe701226 - 4d1cfa3afb8627435744ecdc6d8b58bc72ee0f4c

Linux/Linux a2d274c62e44b1995c170595db3865c6fe701226 - 74efed51e0a4d62f998f806c307778b47fc73395

... and 2 more

Published Sep 27, 2024

Tracked Since Feb 18, 2026