github - ghsa-c3x3-cqcq-2r5x

ghsa-c3x3-cqcq-2r5x

Vulnerability from github

Published

2024-07-29 15:30

Modified

2024-08-26 15:31

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: lantiq_etop: fix double free in detach

The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-41046"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-415"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-07-29T15:15:12Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: lantiq_etop: fix double free in detach\n\nThe number of the currently released descriptor is never incremented\nwhich results in the same skb being released multiple times.",
  "id": "GHSA-c3x3-cqcq-2r5x",
  "modified": "2024-08-26T15:31:14Z",
  "published": "2024-07-29T15:30:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41046"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2024-41046

Vulnerability from cvelistv5

Published

2024-07-29 14:32

Modified

2024-11-05 09:35

Severity ?

Summary

net: ethernet: lantiq_etop: fix double free in detach

References

▼	URL	Tags
	https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec
	https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1
	https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1
	https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156
	https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3
	https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54
	https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f
	https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69

Impacted products

Vendor

Product

Version

▼

Linux

Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e
Version: 504d4721ee8e

Linux

Version: 3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:46:52.280Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41046",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:22:57.535074Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:02.313Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/lantiq_etop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1a2db00a554c",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "907443174e76",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "22b16618a808",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "69ad5fa0ce7c",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "c2b66e2b3939",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "9d23909ae041",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "84aaaa796a19",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            },
            {
              "lessThan": "e1533b6319ab",
              "status": "affected",
              "version": "504d4721ee8e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/lantiq_etop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            },
            {
              "lessThan": "3.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.318",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.280",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.100",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.41",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: lantiq_etop: fix double free in detach\n\nThe number of the currently released descriptor is never incremented\nwhich results in the same skb being released multiple times."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-05T09:35:36.896Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec"
        },
        {
          "url": "https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1"
        },
        {
          "url": "https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156"
        },
        {
          "url": "https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54"
        },
        {
          "url": "https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69"
        }
      ],
      "title": "net: ethernet: lantiq_etop: fix double free in detach",
      "x_generator": {
        "engine": "bippy-9e1c9544281a"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-41046",
    "datePublished": "2024-07-29T14:32:03.686Z",
    "dateReserved": "2024-07-12T12:17:45.625Z",
    "dateUpdated": "2024-11-05T09:35:36.896Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted