CVE-2024-35858

MEDIUM

Linux Kernel < 6.6.30 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix memory leak when bringing down interface When bringing down the TX rings we flush the rings but forget to reclaimed the flushed packets. This leads to a memory leak since we do not free the dma mapped buffers. This also leads to tx control block corruption when bringing down the interface for power management.

Scores

CVSS v3 5.5
EPSS 0.0003
EPSS Percentile 9.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-401
Status published

Affected Products (8)

linux/linux_kernel < 6.6.30
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/Kernel < 6.6.30linux
linux/Kernel < 6.8.9linux

Timeline

Published May 17, 2024
Tracked Since Feb 18, 2026