CVE-2024-0646 | Linux Kernel TLS /net/tls/tls_sw.c tls_sw_sendmsg_splice out-of-bounds write

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function tls_sw_sendmsg_splice of the file /net/tls/tls_sw.c of the component TLS Handler. The manipulation leads to out-of-bounds write.

This vulnerability is known as CVE-2024-0646. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to apply a patch to fix this issue.