CVE-2024-46823

Summary

CVE-2024-46823 is a kernel vulnerability in Linux that has been addressed. The issue arose due to the use of an undefined array 'device_name' in the 'overflow_allocation_test' function. Despite not existing within the function's scope, this array was utilized as a driver name when invoking 'kunit_driver_create' in 'kunit_device_register'. Consequently, the system experienced a kernel panic when KASAN was enabled. To rectify this, the undefined array has been removed, and the device name is now being passed directly as an ascii string to 'kunit_device_register'.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.