CVE-2024-46854
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Sep 27, 2024
Updated: Nov 8, 2024
Summary
CVE-2024-46854 is a vulnerability affecting the Linux kernel's net: dpaa component. This issue allows up to three bytes of data to be leaked when packets under 60 bytes are sent. To prevent data leakage, all packets must be padded to ETH_ZLEN (1514 bytes). The vulnerability can be exploited by sending small packets using tools like ping with a size smaller than 60 bytes.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.