CVE-2024-50168

MEDIUM EPSS 12.5%
Published Nov 7, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Nov 7, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() The sun3_82586_send_packet() returns NETDEV_TX_OK without freeing skb in case of skb->len being too long, add dev_kfree_skb() to fix it.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
12.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥2.6.12  –  <4.19.323
linuxlinux_kernel*≥4.20  –  <5.4.285
linuxlinux_kernel*≥5.5  –  <5.10.229
linuxlinux_kernel*≥5.11  –  <5.15.170
linuxlinux_kernel*≥5.16  –  <6.1.115
linuxlinux_kernel*≥6.2  –  <6.6.59
linuxlinux_kernel*≥6.7  –  <6.11.6
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any
linuxlinux_kernel6.12any

References 9

  • git.kernel.org https://git.kernel.org/stable/c/137010d26dc5cd47cd62fef77cbe952d31951b7a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1a17a4ac2d57102497fac53b53c666dba6a0c20d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2cb3f56e827abb22c4168ad0c1bbbf401bb2f3b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dc937a3086e344f965ca5c459f8f3eb6b68d890
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/84f2bac74000dbb7a177d9b98a17031ec8d07ec5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8d5b20fbc548650019afa96822b6a33ea4ec8aa5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9c6ce55e6f0bd1541f112833006b4052614c7d94
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/db755e55349045375c5c7036e8650afb3ff419d8
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/137010d26dc5cd47cd62fef77cbe952d31951b7a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1a17a4ac2d57102497fac53b53c666dba6a0c20d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2cb3f56e827abb22c4168ad0c1bbbf401bb2f3b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dc937a3086e344f965ca5c459f8f3eb6b68d890
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/84f2bac74000dbb7a177d9b98a17031ec8d07ec5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8d5b20fbc548650019afa96822b6a33ea4ec8aa5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9c6ce55e6f0bd1541f112833006b4052614c7d94
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/db755e55349045375c5c7036e8650afb3ff419d8
    Patch