Riskcovery

CVE-2024-46861

usbnet: ipheth: do not stop RX on failing RX callback

State
Published
Severity
Not scored
Published
Sep 27, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

* Payload too short * Payload formatted incorrecly (e.g. bad NCM framing) * Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a2d274c62e44b1995c170595db3865c6fe701226 to before 4d1cfa3afb8627435744ecdc6d8b58bc72ee0f4cAffected
  • a2d274c62e44b1995c170595db3865c6fe701226 to before 08ca800b0cd56d5e26722f68b18bbbf6840bf44bAffected
  • a2d274c62e44b1995c170595db3865c6fe701226 to before 74efed51e0a4d62f998f806c307778b47fc73395Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.52 through 6.6.*Not affected
  • 6.10.11 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.