Executive Summary

Informations
Name CVE-2024-46861 First vendor Publication 2024-09-27
Vendor Cve Last vendor Modification 2024-10-03

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

* Payload too short * Payload formatted incorrecly (e.g. bad NCM framing) * Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46861

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3615

Sources (Detail)

https://git.kernel.org/stable/c/08ca800b0cd56d5e26722f68b18bbbf6840bf44b
https://git.kernel.org/stable/c/4d1cfa3afb8627435744ecdc6d8b58bc72ee0f4c
https://git.kernel.org/stable/c/74efed51e0a4d62f998f806c307778b47fc73395
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
Date Informations
2024-10-26 02:57:46
  • Multiple Updates
2024-10-25 02:59:39
  • Multiple Updates
2024-10-23 02:58:51
  • Multiple Updates
2024-10-03 21:27:30
  • Multiple Updates
2024-09-30 17:27:26
  • Multiple Updates
2024-09-27 17:27:23
  • First insertion