Vulnerability in Red Hat Enterprise Linux 6
CVE-2024-0607
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is…
EPSS: 0.000 (5.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/security/cve/CVE-2024-0607 (vdb-entry, x_refsource_REDHAT)
- RHBZ#2258635 (issue-tracking, x_refsource_REDHAT)
- github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63
Frequently asked questions
- What is CVE-2024-0607?
- CVE-2024-0607 is a medium-severity vulnerability in Red Hat Enterprise Linux 6, classified under CWE-229. CVSS score: 6.6/10. Published 2024-01-18.
- How severe is CVE-2024-0607?
- Medium severity. CVSS v3 base score is 6.6 out of 10.
- Is CVE-2024-0607 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.