Database/Kernel, userspace & hypervisor
Linux kernel (kTLS): splice() into a kTLS socket overwrites read-only kernel pages - local privilege escalation
CVSS 7.0CVE-2024-0646Kernel, userspace & hypervisorcurated
Impact
splice() into a kTLS socket overwrites read-only kernel pages - local privilege escalation
Who can reach it
Any tenant process in a container
What to do
Livepatchable; otherwise drain + reboot
References
Related entries
- OpenSSH (sshd, RHEL9): Signal-handling race in the privsep child - possible RCE, RHEL 9 specificCVE-2024-6409 · OpenSSH (sshd, RHEL9)High
- sudo: Local privilege escalation via the `--host` option against host-specific sudoers rulesCVE-2025-32462 · sudoHigh
- glibc: Static setuid binaries incorrectly search LD_LIBRARY_PATH during dlopen - local privilege escalationCVE-2025-4802 · glibcHigh
- Xen (x86): CPU opcode cache corruption - host instability triggerable from a guestCVE-2025-54518 · Xen (x86)High
- libblockdev / udisks: allow_active to root via libblockdev through udisksCVE-2025-6019 · libblockdev / udisksHigh
- Linux kernel (arch/x86/kernel/fpu): A guest that disables an XSAVE feature through XFD while the saved XSTATE_BV stillCVE-2026-23005 · Linux kernel (arch/x86/kernel/fpu)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.