CVE-2024-50170

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: bcmasp: fix potential memory leak in bcmasp_xmit()

The bcmasp_xmit() returns NETDEV_TX_OK without freeing skb in case of mapping fails, add dev_kfree_skb() to fix it.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 490cb412007de593e07c1d3e2b1ec4233886707c, < 7218de0778aefbbbcfe474a55f88bbf6f244627d; >= 490cb412007de593e07c1d3e2b1ec4233886707c, < f689f20d3e09f2d4d0a2c575a9859115a33e68bd; >= 490cb412007de593e07c1d3e2b1ec4233886707c, < fed07d3eb8a8d9fcc0e455175a89bc6445d6faed
LinuxLinux6.6

References

Timeline

Published
Nov 7, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-501715.5In the Linux kernel, the following vulnerability has been resolved: net: systemport: fix potential memory leak in bcm_sysport_xmit() The bCVE-2024-501725.5In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a possible memory leak In bnxt_re_setup_chip_ctx() wCVE-2024-501735.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()CVE-2024-501744.7In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArCVE-2024-501755.5In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove use_count guard in stop_streaming The use_cCVE-2024-501765.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix error handling when power-up failed By simply bCVE-2024-501775.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantoCVE-2024-501785.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() CVE-2024-501795.5In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages WhenCVE-2024-50187.5In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessiCVE-2024-501807.8In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xrCVE-2024-501825.5In the Linux kernel, the following vulnerability has been resolved: secretmem: disable memfd_secret() if arch cannot set direct map Return
CVE-2024-50170: Medium severity, CVSS 5.5 | Vulnix