CVE-2024-50170

MEDIUM

Linux Kernel 6.6-6.6.58, 6.7-6.11.5 - Use-After-Free in bcmasp_xmit

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix potential memory leak in bcmasp_xmit() The bcmasp_xmit() returns NETDEV_TX_OK without freeing skb in case of mapping fails, add dev_kfree_skb() to fix it.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/7218de0778aefbbbcfe474a55f88bbf6f244627d

Patch

https://git.kernel.org/stable/c/f689f20d3e09f2d4d0a2c575a9859115a33e68bd

Patch

https://git.kernel.org/stable/c/fed07d3eb8a8d9fcc0e455175a89bc6445d6faed

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 11.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (12)

linux/Kernel 6.6.0 - 6.6.59linux

linux/Kernel 6.7.0 - 6.11.6linux

Linux/Linux < 6.6

Linux/Linux 490cb412007de593e07c1d3e2b1ec4233886707c - 7218de0778aefbbbcfe474a55f88bbf6f244627d

Linux/Linux 490cb412007de593e07c1d3e2b1ec4233886707c - f689f20d3e09f2d4d0a2c575a9859115a33e68bd

Linux/Linux 490cb412007de593e07c1d3e2b1ec4233886707c - fed07d3eb8a8d9fcc0e455175a89bc6445d6faed

Linux/Linux 6.11.6 - 6.11.*

Linux/Linux 6.12

Linux/Linux 6.6

Linux/Linux 6.6.59 - 6.6.*

... and 2 more

Published Nov 07, 2024

Tracked Since Feb 18, 2026