In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23849.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"last_affected": "6.7.1"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "13e788deb7348cc88df34bed736c3b3b9927ea52"
}
],
"source": "REFERENCES_COMMIT"
}
]
}