{"action":"Upgrade linux to 6.6.15-1 or later.","affected":[{"fixed":"6.6.15-1","introduced":"0"}],"component":"linux","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["6.6.15-1"],"id":"tcs_01M5NJC2E2Q12ZWTHYK0CDQ0RG","modified_at":"2026-10-23T18:04:06.475334296Z","published_at":"2024-01-29T11:15:07.933Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-46838","https://security-tracker.debian.org/tracker/CVE-2023-46838"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-46838#Debian:14/linux","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-46838"}],"summary":"Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Be"}