CVE-2024-50206

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: A memory corruption issue has been identified in the Linux kernel's Ethernet driver initialization, specifically in the mtk eth soc component. The problem occurs during the FQ DMA initialization process, where a loop allocates up to MTK FQ DMA LENGTH buffers. If the loop touches more descriptors than necessary, it can corrupt unrelated memory. The issue has been resolved by fixing the loop iteration count.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.