Off-by-One Error in Linux Kernel's RDS Messaging Component

CVE-2024-23849

What is CVE-2024-23849?

The vulnerability involves an off-by-one error detected in the function rds_recv_track_latency within the Linux kernel's RDS (Reliable Datagram Sockets) messaging framework. This error can trigger out-of-bounds access, posing a risk to data integrity and system stability. The issue affects versions of the Linux kernel up to and including 6.7.1, potentially allowing an attacker to exploit this flaw and compromise the system's performance.

References