CVE-2024-46833

Summary

CVE-2024-46833 is a recently identified vulnerability in the Linux kernel. This issue affects the net: hns3 module and involves an out-of-bound array access. The problem arises when the system queries reg info of SSU and loops a variable "tnl_num" times. However, "tnl_num" is obtained from hardware, and the length of the array is fixed. Thus, if "tnl_num" exceeds the array size, an out-of-bound condition results, potentially leading to unintended behavior or system instability. The vulnerability has been addressed through a patch in the latest Linux kernel release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.