Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-41046

net: ethernet: lantiq_etop: fix double free in detach

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.318, 5.4.280, 5.10.222, 5.15.163, 6.1.100, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 1a2db00a554cfda57c397cce79b2804bf9633fec; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 907443174e76b854d28024bd079f0e53b94dc9a1; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 22b16618a80858b3a9d607708444426948cc4ae1; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 9d23909ae041761cb2aa0c3cb1748598d8b6bc54; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in 84aaaa796a19195fc59290154fef9aeb1fba964f; From 504d4721ee8e432af4b5f196a08af38bc4dac5fe · fixed in e1533b6319ab9c3a97dad314dd88b3783bc41b69

  • Linux Linux

    3.0

  • KernelLinux

    From 3.0.0 · fixed in 4.19.318; From 4.20.0 · fixed in 5.4.280; From 5.5.0 · fixed in 5.10.222; From 5.11.0 · fixed in 5.15.163; From 5.16.0 · fixed in 6.1.100; From 6.2.0 · fixed in 6.6.41; From 6.7.0 · fixed in 6.9.10

References 8

git.kernel.org