Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

CVE-2024-46834: Linux kernel network driver may crash on channel change

CVE-2024-46834 · published 2 years ago
Summary

The Linux kernel's network code can crash when it tries to adjust channel settings and cannot read necessary data or allocate memory. This affects Debian and Ubuntu Linux distributions that use the affected kernel. Apply the latest kernel updates from your Linux vendor to fix the issue.

What to do
  • Update debian rootio-linux to version 6.1.159-1.root.io.75.
  • Update canonical linux-lowlatency to version 6.8.0-50.51.1.
  • Update canonical linux-nvidia to version 6.8.0-1019.21.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1019.21.1.
  • Update canonical linux-oem-6.8 to version 6.8.0-1018.18.
  • Update canonical linux-oracle to version 6.8.0-1017.18.
  • Update canonical linux-raspi to version 6.8.0-1016.18.
  • Update canonical linux-riscv to version 6.8.0-50.51.1.
  • Update canonical linux-xilinx to version 6.8.0-1017.18.
  • Update canonical linux-fips to version 6.8.0-78.78+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2015.16.
  • Update canonical linux-realtime to version 6.8.1-1013.14.
  • Update canonical linux-aws-6.8 to version 6.8.0-1020.22~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1020.23~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1019.21~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-50.51~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1017.17~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-50.51.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1019.21~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1017.18~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-50.51.1~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1013.14~22.04.1.
  • Update canonical linux to version 6.8.0-50.51.
  • Update canonical linux-aws to version 6.8.0-1020.22.
  • Update canonical linux-azure to version 6.8.0-1020.23.
  • Update canonical linux-gcp to version 6.8.0-1019.21.
  • Update canonical linux-gke to version 6.8.0-1015.19.
  • Update canonical linux-gkeop to version 6.8.0-1002.4.
  • Update canonical linux-ibm to version 6.8.0-1017.17.
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
  • Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
  • Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
  • Update canonical linux to version 5.15.0-187.197.aikido.112.
  • Update canonical rootio-linux to version 5.15.0-187.197.aikido.112.
  • Update debian linux to version 6.10.11-1.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux kernel to version 6.10.10.
  • Update linux to version 6.1.190-1.aikido.167.
  • Update rootio-linux to version 6.1.190-1.aikido.167.
  • Update linux to version 5.15.0-202.212.aikido.118.
  • Update rootio-linux to version 5.15.0-202.212.aikido.118.
  • Update bellsoft linux-lts to version 6.1.191-r0.
  • Update bellsoft linux-lts to version 6.12.41-r0.
  • Update linux linux_kernel to version 6.10.10 or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-linux < 6.1.159-1.root.io.75
Fix: upgrade to 6.1.159-1.root.io.75
Ubuntu:22.04:LTS canonical linux All versions
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-50.51.1
Fix: upgrade to 6.8.0-50.51.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1019.21
Fix: upgrade to 6.8.0-1019.21
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1019.21.1
Fix: upgrade to 6.8.0-1019.21.1
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1018.18
Fix: upgrade to 6.8.0-1018.18
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1017.18
Fix: upgrade to 6.8.0-1017.18
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1016.18
Fix: upgrade to 6.8.0-1016.18
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-50.51.1
Fix: upgrade to 6.8.0-50.51.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1017.18
Fix: upgrade to 6.8.0-1017.18
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-78.78+fips1
Fix: upgrade to 6.8.0-78.78+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2015.16
Fix: upgrade to 6.8.0-2015.16
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1013.14
Fix: upgrade to 6.8.1-1013.14
– linux linux < 101737d8b88dbd4be6010bac398fe810f1950036
4.6
< 7e6ff8c58985fbe20d131112aba0a8867cdedc59
< 83203ec6f65680109b2048c4f3e501efc14104ba
Ubuntu:Pro:20.04:LTS canonical linux All versions
– linux linux_kernel < 6.10.10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Showing 50 of 215. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1020.22~22.04.1
Fix: upgrade to 6.8.0-1020.22~22.04.1
Ubuntu:22.04:LTS canonical linux-azure All versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1020.23~22.04.1
Fix: upgrade to 6.8.0-1020.23~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1019.21~22.04.1
Fix: upgrade to 6.8.0-1019.21~22.04.1
Ubuntu:22.04:LTS canonical linux-gke All versions
Ubuntu:22.04:LTS canonical linux-gkeop All versions
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-50.51~22.04.1
Fix: upgrade to 6.8.0-50.51~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm All versions
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1017.17~22.04.1
Fix: upgrade to 6.8.0-1017.17~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg All versions
Ubuntu:22.04:LTS canonical linux-kvm All versions
Ubuntu:22.04:LTS canonical linux-lowlatency All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-50.51.1~22.04.1
Fix: upgrade to 6.8.0-50.51.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1019.21~22.04.1
Fix: upgrade to 6.8.0-1019.21~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1017.18~22.04.1
Fix: upgrade to 6.8.0-1017.18~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-50.51.1~22.04.1
Fix: upgrade to 6.8.0-50.51.1~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1013.14~22.04.1
Fix: upgrade to 6.8.1-1013.14~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-50.51
Fix: upgrade to 6.8.0-50.51
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1020.22
Fix: upgrade to 6.8.0-1020.22
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1020.23
Fix: upgrade to 6.8.0-1020.23
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1019.21
Fix: upgrade to 6.8.0-1019.21
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1015.19
Fix: upgrade to 6.8.0-1015.19
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1002.4
Fix: upgrade to 6.8.0-1002.4
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1017.17
Fix: upgrade to 6.8.0-1017.17
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
Fix: upgrade to 5.10.247-1.root.io.42
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-185.195.root.io.101
< 5.15.0-186.196.root.io.103
< 5.15.0-186.196.aikido.104
< 5.15.0-187.197.aikido.112
Fix: upgrade to 5.15.0-185.195.root.io.101
Root:Ubuntu:22.04 canonical linux < 5.15.0-187.197.aikido.112
Fix: upgrade to 5.15.0-187.197.aikido.112
Debian:12 debian linux All versions
Debian:13 debian linux < 6.10.11-1
Fix: upgrade to 6.10.11-1
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Linux linux kernel >= 4.6.0, < 6.10.10
>= 6.7.0, < 6.10.10
Fix: upgrade to 6.10.10
Root:Debian:12 – linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12 – rootio-linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Alpaquita:23 bellsoft linux-lts >= 6.1.189-r0, < 6.1.191-r0
Fix: upgrade to 6.1.191-r0
Alpaquita:25 bellsoft linux-lts >= 6.6.89-r0, < 6.12.41-r0
Fix: upgrade to 6.12.41-r0
Alpaquita:stream bellsoft linux-lts >= 6.6.100-r0, < 6.12.41-r0
Fix: upgrade to 6.12.41-r0
Original advisory text
BELL-CVE-2024-46834
In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with
active RSS contexts") proves that allowing indirection table to contain
channels with out of bounds IDs may lead to crashes. Currently the
max channel check in the core gets skipped if driver can't fetch
the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do
happen we should try to be safe and fail the channel change.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published28 Sep 2024
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta