CVE-2024-50167

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: A memory leak vulnerability has been identified in the Linux kernel's be2net component. The issue arises when the be xmit() function returns NETDEV TX OK without freeing the skb in case of be xmit enqueue() failure. This can be resolved by adding dev kfree skb any() to fix the memory leak. The vulnerability poses a risk of local exploit.

Recommendations: For Linux kernel versions prior to 6.6.61, upgrade to version 6.6.61 or later to resolve the memory leak vulnerability. As a temporary workaround, consider restricting the use of the be xmit() function until a patch is available.