CVE-2024-50206: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: fix memory corruption during fq dma init
The loop responsible for allocating up to MTKFQDMALENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the loop iteration count accordingly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50206?
CVE-2024-50206 has a medium severity rating due to the potential for memory corruption.
How do I fix CVE-2024-50206?
To fix CVE-2024-50206, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-50206?
CVE-2024-50206 affects Linux kernel versions from 6.9.6 to 6.10, as well as certain 6.12 release candidates.
What is the vulnerability type for CVE-2024-50206?
CVE-2024-50206 is classified as a memory corruption vulnerability in the network subsystem of the Linux kernel.
Who is impacted by CVE-2024-50206?
Users and administrators utilizing affected versions of the Linux kernel could experience issues due to CVE-2024-50206.