Cyber Resilience

CVE-2024-46729

Memory Safety in Linux Kernel 4.15 – 6.10.9

Published
18 September 2024
Modified
26 September 2025
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0021 12th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2024-46729 is a high-severity Incorrect Calculation of Buffer Size (CWE-131) vulnerability in Linux Linux Kernel. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is lager than the array size. [HOW] Divide byte size…

more

20 by its element size. This fixes 2 OVERRUN issues reported by Coverity.

CWE(s)

Related Threats

CVEs Like This One

CVE-2026-43501Same product: Linux Linux Kernel
CVE-2026-53143Same product: Linux Linux Kernel
CVE-2024-43825Same product: Linux Linux Kernel
CVE-2024-42259Same product: Linux Linux Kernel
CVE-2023-53077Same product: Linux Linux Kernel
CVE-2024-40987Same product: Linux Linux Kernel
CVE-2024-41003Same product: Linux Linux Kernel
CVE-2023-52512Same product: Linux Linux Kernel
CVE-2024-56615Same product: Linux Linux Kernel
CVE-2023-52775Same product: Linux Linux Kernel

Affected Assets

linux
linux kernel
4.15 — 6.10.9

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly prevent buffer-size miscalculations via coding standards, reviews, and testing, while fixing this single weakness only partially fulfills the broader control.

ID.RA-01 partial match
prevents

Vulnerability scanning and recording can discover out-of-bounds write flaws so they can be remediated.

PR.PS-02 partial match
prevents

Patching or replacing vulnerable software directly eliminates known instances of this coding weakness.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

degrades

Secure coding standards directly require correct buffer-size calculations.

detects

Security testing can detect buffer-size errors before release.

prevents

Secure development lifecycle mandates size-checking practices that reduce buffer-size miscalculations.

prevents

Application security requirements can specify buffer-size validation rules.

prevents

Secure architecture principles include safe memory-allocation guidelines.

prevents

Change management can enforce review gates that catch unsafe memory operations before deployment.

References