CVE-2024-0646
highAn out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls soc…
Vendor / product: Linux — linux kernel
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-01-17 16:15
Modified: 2026-11-04 21:17
NVD status: Modified
Last synced 6 hours ago
Verified against the source API 2026-11-04 21:37 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥4.20 <5.4.267, ≥5.5 <5.10.208, ≥5.11 <5.15.147, ≥5.16 <6.1.69, ≥6.2 <6.6.7, 6.7
redhat / enterprise_linux 8.0, 9.0
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://bugzilla.redhat.com/show_bug.cgi?id=2253908
Patch / mitigation: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267
Patch / mitigation: https://bugzilla.redhat.com/show_bug.cgi?id=2253908
References
- https://access.redhat.com/errata/RHSA-2024:0723 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0724 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0725 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0850 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0851 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0876 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0881 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:0897 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1248 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1250 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1251 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1253 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1268 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1269 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1278 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1306 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1367 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1368 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1377 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1382 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:1404 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2024:2094 secalert@redhat.com
- https://access.redhat.com/security/cve/CVE-2024-0646 secalert@redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2253908 secalert@redhat.com
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e26... secalert@redhat.com
Data sources
NVD CVE API 2.0 — fetched 2026-11-04 21:37 UTC · record ↗