7.8

CVE-2024-46834: linux

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-46834DEBIAN-CVE-2024-46834
Published 27-09-2024Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2024-46834 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.4% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 18
SUSE-SU-2024:3983-1SUSE-SU-2024:3984-1SUSE-SU-2024:3985-1SUSE-SU-2024:3986-1SUSE-SU-2024:4100-1SUSE-SU-2024:4318-1

Timeline

  1. 27-09-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory. Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu130 products
  • linuxAll versions (No fix recorded) | < 6.8.0-50.51
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1020.22
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ d4ab4286276fcd6c155bafdf4422b712068d2516, < 101737d8b88dbd4be6010bac398fe810f1950036 | ≥ d4ab4286276fcd6c155bafdf4422b712068d2516, < 2899d58462ba868287d6ff3acad3675e7adf934f | 4.6
  • linux_kernel< 6.10.10
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.10.11-1

3 vendors · 133 products

References

11 links
Show all 11 references