by Kastro
Paper/Archive/CVE-2024-50206

CVE-2024-50206

Linux Linux — net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.6.306 × 206.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the loop iteration count accordingly.

Affected

ProductAffectedFixed inSource
Linuxc57e558194430d10d5e5f4acd8a8655b68dade13 – < 68cd084e3ec1512cd383cb3e9cf0ab7ab413724c68cd084e3ec1512cd383cb3e9cf0ab7ab413724cCNA
Linuxc57e558194430d10d5e5f4acd8a8655b68dade13 – < 88806efc034a9830f483963326b99930ad519af188806efc034a9830f483963326b99930ad519af1CNA
Linux6f50d0bc1bbd45ce2a6d8f378daa00e56c198e9e–CNA
Linux6.9.6 – < 6.106.10CNA
Linux6.106.11.6CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgit.kernel.org/stable/c/68cd084e3ec1512cd383cb3e9cf0ab7ab413724crefgit.kernel.org/stable/c/88806efc034a9830f483963326b99930ad519af1