Описание
In the Linux kernel, the following vulnerability has been resolved:
be2net: fix potential memory leak in be_xmit()
The be_xmit() returns NETDEV_TX_OK without freeing skb
in case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it.
A flaw was found in the be2net network driver within the Linux kernel. This vulnerability occurs when the be_xmit() function fails to properly release network packet buffers under specific error conditions. This oversight can lead to a memory leak, which, if continuously triggered, could result in system instability or a Denial of Service (DoS) for affected systems.
Меры по смягчению последствий
To mitigate this issue, if the system does not utilize Broadcom NetXtreme II 10 Gigabit Ethernet adapters, the be2net kernel module can be prevented from loading. This can be achieved by creating a blacklist rule.
Create a file named /etc/modprobe.d/blacklist-be2net.conf with the following content:
After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.
This mitigation may impact network functionality if Broadcom NetXtreme II adapters are in use.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel | Will not fix | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Will not fix | ||
| Red Hat Enterprise Linux 9 | kernel | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit() The be_xmit() returns NETDEV_TX_OK without freeing skb in case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it.
In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit() The be_xmit() returns NETDEV_TX_OK without freeing skb in case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it.
In the Linux kernel, the following vulnerability has been resolved: b ...
In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit() The be_xmit() returns NETDEV_TX_OK without freeing skb in case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it.
EPSS
5.5 Medium
CVSS3