Skip to content
8.8 High

CVE-2024-41046 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in…

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

Affected products and versions

Product Affected versions Fixed in
Linux 6.10 earliest → < 6.10 6.10
Linux 6.9 earliest → < 6.9.10 6.9.10
Linux 6.6 earliest → < 6.6.41 6.6.41
Linux 6.1 earliest → < 6.1.100 6.1.100
Linux 5.15 earliest → < 5.15.163 5.15.163
Linux 5.10 earliest → < 5.10.222 5.10.222
Linux 5.4 earliest → < 5.4.280 5.4.280
Linux 4.19 earliest → < 4.19.318 4.19.318
Linux 3.0 No fix stated
Show the 7 other branches
Product Affected versions Fixed in
RUGGEDCOM RST2428P 3.1 earliest → < 3.1 3.1
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family Versions not published
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 earliest → < 3.1 3.1
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 TM MFP - BIOS Versions not published
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE