CVE-2024-49973

CVE-2024-49973

High · published October 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

r8169: add tally counter fields added with RTL8125

RTL8125 added fields to the tally counter, what may result in the chip

dma'ing these new fields to unallocated memory. Therefore make sure

that the allocated memory area is big enough to hold all of the

tally counter values, even if we use only parts of it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Published
2024-10-21T22:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4, < 5.10.2275.10.227
linux/linux_kernel≥ 5.11, < 5.15.1685.15.168
linux/linux_kernel≥ 5.16, < 6.1.1136.1.113
linux/linux_kernel≥ 6.2, < 6.6.556.6.55
linux/linux_kernel≥ 6.7, < 6.10.146.10.14
linux/linux_kernel≥ 6.11, < 6.11.36.11.3
References (12)
EPSS history
Timeline
  • 21 OCT 18:02Z
    r8169: add tally counter fields added with RTL8125
    cvelistv5