CVE-2024-46792: Linux Kernel

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

Affected products

• Linux Linux Kernel: from 6.7, before 6.10.10 (fixed in 6.10.10); version 6.11 only

Published 2024-09-18. Last modified 2026-08-04.