CVE-2024-50128 | Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5 Netlink Attribute lib/nlattr.c wwan_rtnl_policy out-of-bounds

A vulnerability was found in Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5. It has been declared as problematic. Affected by this vulnerability is the function wwan_rtnl_policy in the library lib/nlattr.c of the component Netlink Attribute Handler. The manipulation leads to out-of-bounds read.

This vulnerability is known as CVE-2024-50128. It is possible to launch the attack on the physical device. There is no exploit available.

It is recommended to upgrade the affected component.