CVE-2024-35858

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35858
In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix memory leak when bringing down interface When bringing down the TX rings we flush the rings but forget to reclaimed the flushed packets. This leads to a memory leak since we do not free the dma mapped buffers. This also leads to tx control block corruption when bringing down the interface for power management.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab Patch
https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c Patch
https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 Patch
https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab Patch
https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c Patch
https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
History

30 Dec 2024, 18:12

Type Values Removed Values Added
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab - () https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab - Patch
References () https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c - () https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c - Patch
References () https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 - () https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 - Patch

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab - () https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3ab -
References () https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c - () https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545c -
References () https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 - () https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: bcmasp: corrige la pérdida de memoria al desactivar la interfaz. Al desactivar los anillos TX, los limpiamos pero nos olvidamos de recuperar los paquetes eliminados. Esto provoca una pérdida de memoria ya que no liberamos los búfers asignados por dma. Esto también conduce a la corrupción del bloque de control de transmisión al desactivar la interfaz para la administración de energía.

17 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 15:15

Updated : 2024-12-30 18:12

NVD link : CVE-2024-35858

Mitre link : CVE-2024-35858

CVE.ORG link : CVE-2024-35858

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime