VULNERABILITY INTELLIGENCE

CVE-2024-36946

CVSS score5.5 MEDIUM

EPSS probability0.27%

CISA KEVNot currently listed

Published2024-05-30

Last modified2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)