CVE-2024-43861

MEDIUM

Linux Kernel 4.12-6.10.5 - Use-After-Free in qmi_wwan Non-IP Packet Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive.

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 13.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (27)
linux/Kernel 4.12.0 - 4.19.320linux
linux/Kernel 4.20.0 - 5.4.282linux
linux/Kernel 5.11.0 - 5.15.165linux
linux/Kernel 5.16.0 - 6.1.105linux
linux/Kernel 5.5.0 - 5.10.224linux
linux/Kernel 6.2.0 - 6.6.46linux
linux/Kernel 6.7.0 - 6.10.5linux
Linux/Linux < 4.12
Linux/Linux 4.12
Linux/Linux 4.19.320 - 4.19.*
... and 17 more
Published Aug 20, 2024
Tracked Since Feb 18, 2026