Vulnerability Database

319,195

Total vulnerabilities in the database

CVE-2024-36946

In the Linux kernel, the following vulnerability has been resolved:

phonet: fix rtm_phonet_notify() skb allocation

fill_route() stores three components in the skb:

  • struct rtmsg
  • RTA_DST (u8)
  • RTA_OIF (u32)

Therefore, rtm_phonet_notify() should use

NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)

  • Published: May 30, 2024
  • Updated: Jan 23, 2026
  • CVE: CVE-2024-36946
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 2.6.33 4.19.314
linux / linux_kernel 4.20 5.4.276
linux / linux_kernel 5.5 5.10.217
linux / linux_kernel 5.11 5.15.159
linux / linux_kernel 5.16 6.1.91
linux / linux_kernel 6.2 6.6.31
linux / linux_kernel 6.7 6.8.10
linux / linux_kernel 6.9-rc1 6.9-rc1.x
linux / linux_kernel 6.9-rc2 6.9-rc2.x
linux / linux_kernel 6.9-rc3 6.9-rc3.x
linux / linux_kernel 6.9-rc4 6.9-rc4.x
linux / linux_kernel 6.9-rc5 6.9-rc5.x
linux / linux_kernel 6.9-rc6 6.9-rc6.x
linux / linux_kernel 6.9-rc7 6.9-rc7.x
debian / debian_linux 10.0 10.0.x