In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb.
fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debug-coreUpgrade python3-perf | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-kvm | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-source | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub