CVE-2024-41046CWE-415

CVE-2024-41046

High · published July 29, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: lantiq_etop: fix double free in detach

The number of the currently released descriptor is never incremented

which results in the same skb being released multiple times.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Weakness
CWE-415 · Double Free
Published
2024-07-29T19:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 3.0, < 4.19.3184.19.318
linux/linux_kernel≥ 4.20, < 5.4.2805.4.280
linux/linux_kernel≥ 5.5, < 5.10.2225.10.222
linux/linux_kernel≥ 5.11, < 5.15.1635.15.163
linux/linux_kernel≥ 5.16, < 6.1.1006.1.100
linux/linux_kernel≥ 6.2, < 6.6.416.6.41
linux/linux_kernel≥ 6.7, < 6.9.106.9.10
References (21)
https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-355557.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-503939.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 29 JUL 14:32Z
    net: ethernet: lantiq_etop: fix double free in detach
    cvelistv5