PT-2024-34000

CVE-2024-50168

·

Published

2024-11-07

·

Updated

2026-08-23

Description by

CVSS 4.0
6.8
Medium
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61
Description: A memory leak issue was found in the Linux kernel's net/sun3 82586 module, specifically in the sun3 82586 send packet() function. This function returns NETDEV TX OK without freeing the skb in case of skb->len being too long. To fix this, dev kfree skb() was added.
Recommendations: For versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the sun3 82586 send packet() function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-15251
ALT-PU-2024-15739
ALT-PU-2024-16172
ALT-PU-2024-17099
ALT-PU-2024-17211
ALT-PU-2025-12647
AZL-52923
AZL-52951
DLA-4008-1
MGASA-2024-0368
MGASA-2024-0369
OESA-2024-2570
OESA-2025-1078
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7288-1
USN-7288-2
USN-7289-1
USN-7289-2
USN-7289-3
USN-7289-4
USN-7291-1
USN-7293-1
USN-7294-1
USN-7294-2
USN-7294-3
USN-7294-4
USN-7295-1
USN-7305-1
USN-7308-1
USN-7310-1
USN-7331-1
USN-7388-1
USN-7389-1
USN-7393-1
USN-7413-1
USN-7458-1
USN-7468-1
USN-7539-1
Found an issue in the description? Have something to add? Feel free to write us 👾