Security readout for executives and security teams
Plain-English summary
A Linux kernel BPF type-information name check can accept a one-byte name containing only a null character and then access memory outside the intended bounds. A local, low-privileged attacker may be able to affect confidentiality, integrity, or availability. The supplied CVSS score is 7.3.
Executive priority
Prioritize remediation as high for systems accessible to untrusted local users. Internet reachability alone does not establish exposure because the supplied vector is local. Patch through normal emergency kernel processes after confirming vendor applicability, with particular attention to shared compute and other multi-user environments.
Technical view
btf_name_valid_section() fails to reject a length-one string whose first byte is null. The invalid name passes validation and triggers an out-of-bounds condition. The correction checks that the first byte is non-null and printable. The source bundle does not characterize the out-of-bounds access further.
Likely exposure
Exposure is limited to Linux systems running affected kernels where a low-privileged local actor can reach the vulnerable BPF/BTF processing path. The supplied affected-version data names 6.9, 6.10.10, and 6.11, but also contains an ambiguous “0” entry; confirm applicability through the system vendor.
Exploitation context
The CVSS vector describes local access, low privileges, low complexity, and no user interaction. CISA KEV status is false in the supplied bundle, and no cited source reports active exploitation or a public exploit. Treat exploitation status as unconfirmed, not absent.
Researcher notes
The defect is an input-validation boundary case in BTF section-name handling: length equals one and name[0] equals null. It both permits an invalid name and causes an out-of-bounds condition. The bundle provides two stable-kernel fix commits but does not establish exploitability details, affected distribution packages, or active exploitation.
Mitigation direction
- Install a vendor-supported kernel update incorporating the referenced stable fixes.
- Prioritize multi-user systems and hosts where untrusted local users receive accounts.
- Check distribution or appliance vendor guidance for exact fixed package versions.
- Restrict local access where patching cannot be completed promptly.
Validation and detection
- Record each system’s running kernel version and vendor package release.
- Compare installed packages with the vendor’s CVE-2024-46764 advisory or changelog.
- Confirm the kernel source includes one of the referenced stable fixes or an equivalent backport.
- Reboot updated systems and verify the newly installed kernel is running.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-46764 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H1.85.5LinuxVulnerability scoring details
Base CVSS 3.1 score
7.3HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/c8ffe2d4d37a05ce18c71b87421443c16f8475e5CVE reference, Linux
- https://git.kernel.org/stable/c/bb6705c3f93bed2af03d43691743d4c43e3c8e6fCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.