Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-36946 Details

Description

In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4)

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/4ff334cade9dae50e4be387f71e94fae634aa9b4	kernel.org	Patch
https://git.kernel.org/stable/c/728a83160f98ee6b60df0d890141b9b7240182fe	kernel.org	Patch
https://git.kernel.org/stable/c/9a77226440008cf04ba68faf641a2d50f4998137	kernel.org	Patch
https://git.kernel.org/stable/c/d8cac8568618dcb8a51af3db1103e8d4cc4aeea7	kernel.org	Patch
https://git.kernel.org/stable/c/dc6beac059f0331de97155a89d84058d4a9e49c7	kernel.org	Patch
https://git.kernel.org/stable/c/ec1f71c05caeba0f814df77e0f511d8b4618623a	kernel.org	Patch
https://git.kernel.org/stable/c/ee9e39a6cb3ca2a3d35b4ae25547ee3526a44d00	kernel.org	Patch
https://git.kernel.org/stable/c/f085e02f0a32f6dfcfabc6535c9c4a1707cef86b	kernel.org	Patch
https://git.kernel.org/stable/c/4ff334cade9dae50e4be387f71e94fae634aa9b4	CVE	Patch
https://git.kernel.org/stable/c/728a83160f98ee6b60df0d890141b9b7240182fe	CVE	Patch
https://git.kernel.org/stable/c/9a77226440008cf04ba68faf641a2d50f4998137	CVE	Patch
https://git.kernel.org/stable/c/d8cac8568618dcb8a51af3db1103e8d4cc4aeea7	CVE	Patch
https://git.kernel.org/stable/c/dc6beac059f0331de97155a89d84058d4a9e49c7	CVE	Patch
https://git.kernel.org/stable/c/ec1f71c05caeba0f814df77e0f511d8b4618623a	CVE	Patch
https://git.kernel.org/stable/c/ee9e39a6cb3ca2a3d35b4ae25547ee3526a44d00	CVE	Patch
https://git.kernel.org/stable/c/f085e02f0a32f6dfcfabc6535c9c4a1707cef86b	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html	CVE	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20241004-0002/	CVE	Third Party Advisory

see all 19 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-401	Missing Release of Memory after Effective Lifetime	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 2.6.33, < 4.19.314 >= 4.20, < 5.4.276 >= 5.5, < 5.10.217 >= 5.11, < 5.15.159 >= 5.16, < 6.1.91
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.9:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc3:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc4:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc5:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc6:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc7:::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Jan 22, 2026	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
May 30, 2024	New CVE Received	kernel.org