In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb.
fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-devel | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-debug | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub