exploitDog

CVE-2024-41046

Опубликовано: 29 июл. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: lantiq_etop: fix double free in detach

The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 4.19.318 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.280 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.222 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.163 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.100 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.41 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.9.10 (исключая)

EPSS

Процентиль: 15%

0.00048

Низкий

7.8 High

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVE-2024-41046

CVSS3: 7.8

ubuntu

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

CVE-2024-41046

CVSS3: 7.8

redhat

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

CVE-2024-41046

CVSS3: 7.8

msrc

9 месяцев назад

Описание отсутствует

CVE-2024-41046

CVSS3: 7.8

debian

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: n ...

GHSA-c3x3-cqcq-2r5x

CVSS3: 7.8

github

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

EPSS

Процентиль: 15%

0.00048

Низкий

7.8 High

CVSS3

Дефекты

CWE-415

Уязвимость CVE-2024-41046