CVE-2024-50171

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: systemport: fix potential memory leak in bcm_sysport_xmit()

The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 8e81ce7d0166a2249deb6d5e42f28a8b8c9ea72faffected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 31701ef0c4547973991ff63596c927f841dfd133affected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < b6321146773dcbbc372a54dbada67e0b50e0a25caffected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 5febfc545389805ce83d37f9f4317055b26dd7d7affected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 533d2f30aef272dade17870a509521c3afc38a03affected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 4b70478b984af3c9d0279c121df5ff94e2533dbdaffected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < 7d5030a819c3589cf9948b1eee397b626ec590f5affected
LinuxLinux80105befdb4b8cea924711b40b2462b87df65b62 < c401ed1c709948e57945485088413e1bb5e94bd1affected
LinuxLinux3.16affected
LinuxLinux0 < 3.16unaffected
LinuxLinux4.19.323 <= 4.19.*unaffected
LinuxLinux5.4.285 <= 5.4.*unaffected
LinuxLinux5.10.229 <= 5.10.*unaffected
LinuxLinux5.15.170 <= 5.15.*unaffected
LinuxLinux6.1.115 <= 6.1.*unaffected
LinuxLinux6.6.59 <= 6.6.*unaffected
LinuxLinux6.11.6 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References