boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-0646HIGH
Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0031   23.5     —
AFFECTED
  Product                                                                Versions     Fixed
  kernel                                                                 unspecified  —
  Red Hat Enterprise Linux 8                                             unspecified  0:4.18.0-513.18.1.rt7.320.el8_9
  Red Hat Enterprise Linux 8                                             unspecified  —
  Red Hat Enterprise Linux 8                                             unspecified  0:4.18.0-513.18.1.el8_9
  Red Hat Enterprise Linux 8.2 Advanced Update Support                   unspecified  0:4.18.0-193.128.1.el8_2
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service         unspecified  0:4.18.0-193.128.1.rt13.179.el8_2
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service         unspecified  0:4.18.0-193.128.1.el8_2
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions         unspecified  0:4.18.0-193.128.1.el8_2
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions         unspecified  —
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:4.18.0-305.125.1.el8_4
  + 39 more
TIMELINE
  Jan 17  Reserved by redhat
  Jan 17  Published (CNA: redhat)
  Aug 6   RESCORED — CVE-2024-0646 (kernel). CVSS 7 → 7.8 (NVD).
CWE-787 · CNA: redhat · CVSS v3.1 · 26 references · NVD status: Modified

Description

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
January 17, 2024ReservedReserved by redhat
January 17, 2024PublishedPublished (CNA: redhat)
August 6, 2026RESCOREDRESCORED — CVE-2024-0646 (kernel). CVSS 7 → 7.8 (NVD).

Affected

Affected products and packages — 49 rows
VendorProduct / PackageEcosystemVersion introducedFixed
—kernel———
Red HatRed Hat Enterprise Linux 8——0:4.18.0-513.18.1.rt7.320.el8_9
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8——0:4.18.0-513.18.1.el8_9
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support——0:4.18.0-193.128.1.el8_2
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service——0:4.18.0-193.128.1.rt13.179.el8_2
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service——0:4.18.0-193.128.1.el8_2
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions——0:4.18.0-193.128.1.el8_2
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions———
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support——0:4.18.0-305.125.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service——0:4.18.0-305.125.1.rt7.201.el8_4
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service——0:4.18.0-305.125.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions——0:4.18.0-305.125.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions———
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support——0:4.18.0-372.91.1.el8_6
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support———
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support———
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support——0:4.18.0-477.51.1.el8_8
Red HatRed Hat Enterprise Linux 9——0:5.14.0-362.24.1.el9_3
Red HatRed Hat Enterprise Linux 9——0:5.14.0-362.24.1.el9_3
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support——0:5.14.0-70.93.2.el9_0
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support——0:5.14.0-70.93.1.rt21.165.el9_0
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support———
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support——0:5.14.0-284.52.1.el9_2
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support——0:5.14.0-284.52.1.rt14.337.el9_2
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support———
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8——0:4.18.0-372.91.1.el8_6
Red HatRHOL-5.8-RHEL-9——v5.8.6-22
Red HatRHOL-5.8-RHEL-9——v5.8.6-11
Red HatRHOL-5.8-RHEL-9——v6.8.1-407
Red HatRHOL-5.8-RHEL-9——v5.8.6-19
Red HatRHOL-5.8-RHEL-9——v1.0.0-479
Red HatRHOL-5.8-RHEL-9——v5.8.6-7
Red HatRHOL-5.8-RHEL-9——v0.4.0-247
Red HatRHOL-5.8-RHEL-9——v5.8.6-5
Red HatRHOL-5.8-RHEL-9——v1.1.0-227
Red HatRHOL-5.8-RHEL-9——v5.8.1-470
Red HatRHOL-5.8-RHEL-9——v2.9.6-14
Red HatRHOL-5.8-RHEL-9——v5.8.6-2
Red HatRHOL-5.8-RHEL-9——v5.8.6-24
Red HatRHOL-5.8-RHEL-9——v5.8.6-10
Red HatRHOL-5.8-RHEL-9——v0.1.0-525
Red HatRHOL-5.8-RHEL-9——v0.1.0-224
Red HatRHOL-5.8-RHEL-9——v0.28.1-56
Red HatRed Hat Enterprise Linux 6———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 9———

Weaknesses

CWE-787

References (26)

Related

Authoritative record: CVE-2024-0646 at cve.org

Vendors: red hat

Weaknesses: CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-0646 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.