In the Linux kernel, the following vulnerability has been resolved:
net: dpaa: Pad packets to ETH_ZLEN
When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be reproduced by running
$ ping -s 11 destination
[
{
"id": "CVE-2024-46854-04850f25",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f43190e33224c49e1c7ebbc25923ff400d87ec00",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1395.0,
"function_hash": "325311480780788904682201518776838453098"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-05e74ac2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc43a096cfe65b5c32168313846c5cd135d08f1d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1249.0,
"function_hash": "18080618284719174150515785885148693226"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-29d36da5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f31f51bfc8214a6deaac2920e6342cb9d019133",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-2d317649",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38f5db5587c0ee53546b28c50ba128253181ac83",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-2f49f870",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f43190e33224c49e1c7ebbc25923ff400d87ec00",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-342d5118",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd5b9d657ecd44ad5f254c3fea3a6ab1cf0e2ef7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-52c67a5e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-53e04e0d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38f5db5587c0ee53546b28c50ba128253181ac83",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1407.0,
"function_hash": "29116895413129285341915668281700450408"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-70bcc1fd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc43a096cfe65b5c32168313846c5cd135d08f1d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-73c1f283",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-46854-7ac5d047",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1395.0,
"function_hash": "325311480780788904682201518776838453098"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-7f3eac24",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f31f51bfc8214a6deaac2920e6342cb9d019133",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1407.0,
"function_hash": "29116895413129285341915668281700450408"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-8fe2f6e2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd5b9d657ecd44ad5f254c3fea3a6ab1cf0e2ef7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1249.0,
"function_hash": "18080618284719174150515785885148693226"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-b4a17043",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1395.0,
"function_hash": "325311480780788904682201518776838453098"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-d488e408",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34fcac26216ce17886af3eb392355b459367af1a",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "dpaa_start_xmit",
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"length": 1395.0,
"function_hash": "325311480780788904682201518776838453098"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-46854-f1f8f171",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34fcac26216ce17886af3eb392355b459367af1a",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/freescale/dpaa/dpaa_eth.c"
},
"digest": {
"line_hashes": [
"68728142638316551050395805157584067601",
"62896262220775414331898773204944973243",
"140534999876941341636092950776508284168",
"315825475634946688270210603156179454096",
"256732848166192782739468141949683907298",
"322117403594340972454554577604330625929",
"62495993520918899963557255529367006379",
"96103942706042480698023707209623165202",
"198360390869075423331871398109154029747",
"140583334751522180308312534733061302558",
"247581119128366443664181347286904225199",
"81914096587843172237995729554205430416"
],
"threshold": 0.9
},
"signature_type": "Line"
}
]