CVE-2024-41046

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

26 Aug 2024, 15:07

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec - () https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec - Patch
References () https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1 - () https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1 - Patch
References () https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156 - () https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156 - Patch
References () https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f - () https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f - Patch
References () https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1 - () https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1 - Patch
References () https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54 - () https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54 - Patch
References () https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3 - () https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3 - Patch
References () https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69 - () https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-415
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: net: ethernet: lantiq_etop: fix double free in detach El número del descriptor publicado actualmente nunca se incrementa, lo que da como resultado que el mismo skb se publique varias veces.

29 Jul 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-29 15:15

Updated : 2024-08-26 15:07


NVD link : CVE-2024-41046

Mitre link : CVE-2024-41046

CVE.ORG link : CVE-2024-41046


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free