PT-2024-34000
CVE-2024-50168
·
Published
2024-11-07
·
Updated
2026-08-23
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A memory leak issue was found in the Linux kernel's net/sun3 82586 module, specifically in the
sun3 82586 send packet() function. This function returns NETDEV TX OK without freeing the skb in case of skb->len being too long. To fix this, dev kfree skb() was added.Recommendations:
For versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the
sun3 82586 send packet() function until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾