CVE-2024-0646

CVE-2024-0646 is an out-of-bounds memory write vulnerability in the Linux kernel's Transport Layer Security (kTLS) functionality, specifically when using the splice function with a kTLS socket as the destination. This flaw affects various Linux distributions, including Red Hat Enterprise Linux and the general Linux kernel. With a CVSS score of 7.8 (High), a local attacker with low privileges can exploit this vulnerability to cause a system crash or potentially escalate privileges. Currently, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.