CVE-2024-35858CWE-401

CVE-2024-35858

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bcmasp: fix memory leak when bringing down interface

When bringing down the TX rings we flush the rings but forget to

reclaimed the flushed packets. This leads to a memory leak since we

do not free the dma mapped buffers. This also leads to tx control

block corruption when bringing down the interface for power

management.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-05-17T19:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.306.6.30
linux/linux_kernel≥ 6.7, < 6.8.96.8.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 17 MAY 14:47Z
    net: bcmasp: fix memory leak when bringing down interface
    cvelistv5