Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
CVE-2024-0646

7.8HIGH

Key Information:

Vendor: Red Hat
Status: Kernel; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Vendor: CVE Published:; 17 January 2024

Badges

📰 News Worthy

Summary

The vulnerability arises from an out-of-bounds memory write flaw in the Linux kernel's Transport Layer Security (TLS) functionality, specifically during a user-initiated call to the splice function with a ktls socket as its destination. This flaw potentially allows a local user to crash the system or escalate their privileges, posing significant security risks to systems utilizing affected versions of the Linux kernel.

Affected Version(s)

kernel 6.7-rc5

News Articles

prophaze.com

CVE-2024-0646

CVE-2024-0646 : LINUX KERNEL TLS /NET/TLS/TLS_SW.C TLS_SW_SENDMSG_SPLICE OUT-OF-BOUNDS WRITE - Cloud WAF

CVE-2024-0646 : An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.

1 year ago