CVE-2024-46854

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a data leakage vulnerability in the Linux kernel's net: dpaa component. When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. This can be avoided by extending all packets to ETH ZLEN, ensuring nothing is leaked in the padding. The bug can be reproduced by running $ ping -s 11 destination.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.