NVD Vulnerability Detail

CVE-2024-50168

Summary	In the Linux kernel, the following vulnerability has been resolved: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() The sun3_82586_send_packet() returns NETDEV_TX_OK without freeing skb in case of skb->len being too long, add dev_kfree_skb() to fix it.
Publication Date	Nov. 7, 2024, 7:15 p.m.
Registration Date	Nov. 8, 2024, 5 a.m.
Last Update	Nov. 14, 2024, 1:16 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/9c6ce55e6f0bd1541f112833006b4052614c7d94	Patch
2	https://git.kernel.org/stable/c/1a17a4ac2d57102497fac53b53c666dba6a0c20d	Patch
3	https://git.kernel.org/stable/c/6dc937a3086e344f965ca5c459f8f3eb6b68d890	Patch
4	https://git.kernel.org/stable/c/84f2bac74000dbb7a177d9b98a17031ec8d07ec5	Patch
5	https://git.kernel.org/stable/c/2cb3f56e827abb22c4168ad0c1bbbf401bb2f3b8	Patch
6	https://git.kernel.org/stable/c/137010d26dc5cd47cd62fef77cbe952d31951b7a	Patch
7	https://git.kernel.org/stable/c/8d5b20fbc548650019afa96822b6a33ea4ec8aa5	Patch
8	https://git.kernel.org/stable/c/db755e55349045375c5c7036e8650afb3ff419d8	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性

Title	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性
Summary	Linux の Linux Kernel には、有効期限後のメモリの解放の欠如に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 19, 2024, midnight
Registration Date	Nov. 14, 2024, 1:41 p.m.
Last Update	Nov. 14, 2024, 1:41 p.m.

Affected System

Linux

Linux Kernel 2.6.12 以上 4.19.323 未満

Linux Kernel 4.20 以上 5.4.285 未満

Linux Kernel 5.11 以上 5.15.170 未満

Linux Kernel 5.16 以上 6.1.115 未満

Linux Kernel 5.5 以上 5.10.229 未満

Linux Kernel 6.12

Linux Kernel 6.2 以上 6.6.59 未満

Linux Kernel 6.7 以上 6.11.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50168	https://www.cve.org/CVERecord?id=CVE-2024-50168
National Vulnerability Database (NVD)
2	CVE-2024-50168	https://nvd.nist.gov/vuln/detail/CVE-2024-50168

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-401	https://cwe.mitre.org/data/definitions/401.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (137010d)	https://git.kernel.org/stable/c/137010d26dc5cd47cd62fef77cbe952d31951b7a
2	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (1a17a4a)	https://git.kernel.org/stable/c/1a17a4ac2d57102497fac53b53c666dba6a0c20d
3	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (2cb3f56)	https://git.kernel.org/stable/c/2cb3f56e827abb22c4168ad0c1bbbf401bb2f3b8
4	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (6dc937a)	https://git.kernel.org/stable/c/6dc937a3086e344f965ca5c459f8f3eb6b68d890
5	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (84f2bac)	https://git.kernel.org/stable/c/84f2bac74000dbb7a177d9b98a17031ec8d07ec5
6	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (8d5b20f)	https://git.kernel.org/stable/c/8d5b20fbc548650019afa96822b6a33ea4ec8aa5
7	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (9c6ce55)	https://git.kernel.org/stable/c/9c6ce55e6f0bd1541f112833006b4052614c7d94
8	net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (db755e5)	https://git.kernel.org/stable/c/db755e55349045375c5c7036e8650afb3ff419d8
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年11月14日] 掲載	Nov. 14, 2024, 10:35 a.m.