PT-2024-34000
CVE-2024-50168
·
تاريخ النشر
2024-11-07
·
تاريخ التحديث
2026-08-23
الوصف من
CVSS 4.0
6.8
متوسطةالمقاييسAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A memory leak issue was found in the Linux kernel's net/sun3 82586 module, specifically in the
sun3 82586 send packet() function. This function returns NETDEV TX OK without freeing the skb in case of skb->len being too long. To fix this, dev kfree skb() was added.Recommendations:
For versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the
sun3 82586 send packet() function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾