CVE-2024-50170: net: bcmasp: fix potential memory leak in bcmasp_xmit()
In the Linux kernel, the following vulnerability has been resolved:
net: bcmasp: fix potential memory leak in bcmaspxmit()
The bcmaspxmit() returns NETDEVTXOK without freeing skb in case of mapping fails, add devkfreeskb() to fix it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50170?
CVE-2024-50170 is classified as a low-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50170?
To fix CVE-2024-50170, ensure you update to the latest patched version of the Linux kernel that addresses this issue.
What systems are affected by CVE-2024-50170?
CVE-2024-50170 affects specific versions of the Linux kernel ranging from 6.7 to 6.11.6 and includes certain release candidates.
What type of vulnerability is CVE-2024-50170?
CVE-2024-50170 is a memory leak vulnerability that occurs due to improper handling in the bcmasp_xmit() function.
Is CVE-2024-50170 being actively exploited?
As of now, there are no known exploits actively targeting CVE-2024-50170.