CVE-2024-46861

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-46861
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46861.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-46861
Downstream
Related
Published
2024-09-27T12:42:51Z
Modified
2025-10-15T15:25:24.233053Z
Summary
usbnet: ipheth: do not stop RX on failing RX callback
Details

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

  • Payload too short
  • Payload formatted incorrecly (e.g. bad NCM framing)
  • Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a2d274c62e44b1995c170595db3865c6fe701226
Fixed
4d1cfa3afb8627435744ecdc6d8b58bc72ee0f4c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a2d274c62e44b1995c170595db3865c6fe701226
Fixed
08ca800b0cd56d5e26722f68b18bbbf6840bf44b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a2d274c62e44b1995c170595db3865c6fe701226
Fixed
74efed51e0a4d62f998f806c307778b47fc73395

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.10
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.10.7
v6.10.8
v6.10.9
v6.11-rc1
v6.11-rc2
v6.4
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2024-46861-826b4480",
            "signature_type": "Function",
            "target": {
                "file": "drivers/net/usb/ipheth.c",
                "function": "ipheth_rcvbulk_callback"
            },
            "signature_version": "v1",
            "digest": {
                "length": 821.0,
                "function_hash": "113951286950158991078894689561352038965"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74efed51e0a4d62f998f806c307778b47fc73395"
        },
        {
            "id": "CVE-2024-46861-d94620ed",
            "signature_type": "Line",
            "target": {
                "file": "drivers/net/usb/ipheth.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "207070828401162848743879555984739782224",
                    "229565837545713399298046783488382732418",
                    "94482464094978762378104929997954594654",
                    "309846594580196002356460584052765536037"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74efed51e0a4d62f998f806c307778b47fc73395"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.52
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.11