AZL-49895
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-49895.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-49895
- Upstream
- Published
- 2024-09-27T13:15:17Z
- Modified
- 2026-04-01T05:16:13.278002Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2024-46861 affecting package kernel for versions less than 6.6.56.1-5
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: do not stop RX on failing RX callback
RX callbacks can fail for multiple reasons:
- Payload too short
- Payload formatted incorrecly (e.g. bad NCM framing)
- Lack of memory
None of these should cause the driver to seize up.
Make such failures non-critical and continue processing further incoming URBs.
- References