HIGH Published January 17, 2024

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS base score

7.0 (v3.1)

Severity

HIGH

Attack vector

Local

Weakness

CWE-787

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

linux linux kernel redhat enterprise linux

References

access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory

View full NVD advisory →

More linux vulnerabilities

Published the same day

← Back to CVE watch

CVE-2024-0646

Affected products

References

More linux vulnerabilities

Published the same day

Related reading