CVE-2024-46764 (GCVE-0-2024-46764)

Vulnerability from cvelistv5 – Published: 2024-09-18 07:12 – Updated: 2026-08-05 11:38
VLAI
Title
bpf: add check for invalid name in btf_name_valid_section()
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name string is 1 and the value of name[0] is NULL byte, an OOB vulnerability occurs in btf_name_valid_section() and the return value is true, so the invalid name passes the check. To solve this, you need to check if the first position is NULL byte and if the first character is printable.
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-29 14:43 UTC
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786 , < c8ffe2d4d37a05ce18c71b87421443c16f8475e5 (git)
Affected: bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786 , < bb6705c3f93bed2af03d43691743d4c43e3c8e6f (git)
Create a notification for this product.
Linux Linux Affected: 6.9
Unaffected: 0 , < 6.9 (semver)
Unaffected: 6.10.10 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46764",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T14:43:02.991140Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T14:43:16.765Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/bpf/btf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c8ffe2d4d37a05ce18c71b87421443c16f8475e5",
              "status": "affected",
              "version": "bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786",
              "versionType": "git"
            },
            {
              "lessThan": "bb6705c3f93bed2af03d43691743d4c43e3c8e6f",
              "status": "affected",
              "version": "bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/bpf/btf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.9"
            },
            {
              "lessThan": "6.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.10",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: add check for invalid name in btf_name_valid_section()\n\nIf the length of the name string is 1 and the value of name[0] is NULL\nbyte, an OOB vulnerability occurs in btf_name_valid_section() and the\nreturn value is true, so the invalid name passes the check.\n\nTo solve this, you need to check if the first position is NULL byte and\nif the first character is printable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The only path to `btf_name_valid_section()` is the `bpf(BPF_BTF_LOAD)` syscall (`bpf_btf_load()` \u2192 `btf_new_fd()` \u2192 `btf_parse()` \u2192 `btf_datasec_check_meta()`), which requires local access to submit an attacker-crafted BTF blob. No network- or peer-supplied data reaches BTF parsing.\nAC:L - The attacker fully controls the BTF blob and can set a DATASEC `name_off` to exactly `hdr.str_len - 1`, which `btf_check_meta()` accepts and which is guaranteed by `btf_parse_str_sec()` to be the last byte of the allocation, so the `src++` walks off the end every single time. By choosing a page-aligned blob above `KMALLOC_MAX_SIZE` the attacker also forces the `kvmalloc()` vmalloc fallback so the first OOB byte lands on the vmalloc guard page \u2014 a 100% reproducible, single-shot trigger with no race and no layout luck.\nPR:L - `bpf_btf_load()` gates on `bpf_token_capable(token, CAP_BPF)`, which under a BPF token (present in every affected version, v6.9\u2013v6.11) degrades to `ns_capable(token-\u003euserns, CAP_BPF)`, so a non-root user inside a delegated user namespace \u2014 or any unprivileged service account granted ambient CAP_BPF, as CNI/observability agents routinely are \u2014 can load arbitrary BTF. This is a low-privilege local account, not real root in the init namespace.\nUI:N - The attacker performs the entire sequence itself with a single `bpf(BPF_BTF_LOAD)` call on a blob it constructs; no other user or process needs to act.\nS:U - The out-of-bounds read occurs in kernel heap/vmalloc memory within the same security authority that hosts the calling process; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The loop reads up to `KSYM_NAME_LEN` (512) bytes of adjacent kernel memory past the end of the `kvmalloc()` allocation \u2014 far beyond a strictly bounded few-byte overread \u2014 exposing neighbouring slab contents that the attacker can groom, with the boolean load result acting as an oracle on that data.\nI:L - The bug is a validation bypass as well as an overread: removing the `src++` in the fix shows the pre-fix code never checked the first character, so both empty names and names with a leading non-printable/control byte were admitted into kernel-held BTF state and are surfaced in verifier-log output and via `BPF_BTF_GET_FD_BY_ID` to consuming tooling. There is no write primitive, so the integrity effect is limited rather than arbitrary.\nA:H - With a page-aligned BTF blob above `KMALLOC_MAX_SIZE`, `kvmalloc()` falls back to `vmalloc()`, which appends a guard page in `__get_vm_area_node()`, so the very first out-of-bounds byte dereferences unmapped kernel memory and produces an unhandled paging request / oops (a full panic with `panic_on_oops`). Even in the slab case this is a KASAN-reportable slab-out-of-bounds read, and the trigger is cheap and repeatable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:38:26.724Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c8ffe2d4d37a05ce18c71b87421443c16f8475e5"
        },
        {
          "url": "https://git.kernel.org/stable/c/bb6705c3f93bed2af03d43691743d4c43e3c8e6f"
        }
      ],
      "title": "bpf: add check for invalid name in btf_name_valid_section()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46764",
    "datePublished": "2024-09-18T07:12:23.591Z",
    "dateReserved": "2024-09-11T15:12:18.272Z",
    "dateUpdated": "2026-08-05T11:38:26.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-46764",
      "date": "2026-08-16",
      "epss": "0.00218",
      "percentile": "0.12524"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf: add check for invalid name in btf_name_valid_section()\\n\\nIf the length of the name string is 1 and the value of name[0] is NULL\\nbyte, an OOB vulnerability occurs in btf_name_valid_section() and the\\nreturn value is true, so the invalid name passes the check.\\n\\nTo solve this, you need to check if the first position is NULL byte and\\nif the first character is printable.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: a\\u00f1adir comprobaci\\u00f3n de nombre no v\\u00e1lido en btf_name_valid_section() Si la longitud de la cadena de nombre es 1 y el valor de name[0] es un byte NULL, se produce una vulnerabilidad OOB en btf_name_valid_section() y el valor de retorno es verdadero, por lo que el nombre no v\\u00e1lido pasa la comprobaci\\u00f3n. Para resolver esto, debe comprobar si la primera posici\\u00f3n es un byte NULL y si el primer car\\u00e1cter es imprimible.\"}]",
      "id": "CVE-2024-46764",
      "lastModified": "2024-09-20T12:30:51.220",
      "published": "2024-09-18T08:15:04.670",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/bb6705c3f93bed2af03d43691743d4c43e3c8e6f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c8ffe2d4d37a05ce18c71b87421443c16f8475e5\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-46764\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-09-18T08:15:04.670\",\"lastModified\":\"2026-08-04T11:20:23.530\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf: add check for invalid name in btf_name_valid_section()\\n\\nIf the length of the name string is 1 and the value of name[0] is NULL\\nbyte, an OOB vulnerability occurs in btf_name_valid_section() and the\\nreturn value is true, so the invalid name passes the check.\\n\\nTo solve this, you need to check if the first position is NULL byte and\\nif the first character is printable.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: a\u00f1adir comprobaci\u00f3n de nombre no v\u00e1lido en btf_name_valid_section() Si la longitud de la cadena de nombre es 1 y el valor de name[0] es un byte NULL, se produce una vulnerabilidad OOB en btf_name_valid_section() y el valor de retorno es verdadero, por lo que el nombre no v\u00e1lido pasa la comprobaci\u00f3n. Para resolver esto, debe comprobar si la primera posici\u00f3n es un byte NULL y si el primer car\u00e1cter es imprimible.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"kernel/bpf/btf.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786\",\"lessThan\":\"c8ffe2d4d37a05ce18c71b87421443c16f8475e5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786\",\"lessThan\":\"bb6705c3f93bed2af03d43691743d4c43e3c8e6f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"kernel/bpf/btf.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.10\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-29T14:43:02.991140Z\",\"id\":\"CVE-2024-46764\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.9\",\"versionEndExcluding\":\"6.10.10\",\"matchCriteriaId\":\"2CB7114B-59C6-4708-AE2C-B7C2D0BA0FA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B3CE743-2126-47A3-8B7C-822B502CF119\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DEB27E7-30AA-45CC-8934-B89263EF3551\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0005AEF-856E-47EB-BFE4-90C46899394D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"39889A68-6D34-47A6-82FC-CD0BF23D6754\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8383ABF-1457-401F-9B61-EE50F4C61F4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B77A9280-37E6-49AD-B559-5B23A3B1DC3D\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/bb6705c3f93bed2af03d43691743d4c43e3c8e6f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c8ffe2d4d37a05ce18c71b87421443c16f8475e5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T18:02:30+00:00",
      "cve": "CVE-2024-46764",
      "id": "CVE-2024-46764",
      "initial_release_date": "2024-09-18T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: bpf: add check for invalid name in btf_name_valid_section()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46764.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-25T01:38:39Z",
      "cve": "CVE-2024-46764",
      "id": "CVE-2024-46764",
      "initial_release_date": "2024-09-19T03:10:22Z",
      "product_status:known_not_affected": "325",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-46764",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-46764.json",
      "version": "18"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-46764\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-29T14:43:02.991140Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-29T14:43:07.174Z\"}}], \"cna\": {\"title\": \"bpf: add check for invalid name in btf_name_valid_section()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786\", \"lessThan\": \"c8ffe2d4d37a05ce18c71b87421443c16f8475e5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786\", \"lessThan\": \"bb6705c3f93bed2af03d43691743d4c43e3c8e6f\", \"versionType\": \"git\"}], \"programFiles\": [\"kernel/bpf/btf.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.9\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.9\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.10.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"kernel/bpf/btf.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c8ffe2d4d37a05ce18c71b87421443c16f8475e5\"}, {\"url\": \"https://git.kernel.org/stable/c/bb6705c3f93bed2af03d43691743d4c43e3c8e6f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf: add check for invalid name in btf_name_valid_section()\\n\\nIf the length of the name string is 1 and the value of name[0] is NULL\\nbyte, an OOB vulnerability occurs in btf_name_valid_section() and the\\nreturn value is true, so the invalid name passes the check.\\n\\nTo solve this, you need to check if the first position is NULL byte and\\nif the first character is printable.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.10\", \"versionStartIncluding\": \"6.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"6.9\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:35:53.872Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-46764\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:35:53.872Z\", \"dateReserved\": \"2024-09-11T15:12:18.272Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-09-18T07:12:23.591Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.