Linux Distros Unpatched Vulnerability : CVE-2024-50276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider...

CVE-2024-50276

creationtimestamp| type| source ---|---|--- 2024-11-19 02:24:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113507242946380779...

CVE-2024-50276

In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102xtxframespi, so in case the TX skb room needs to be expanded, we should free the the temporary skb instead of the origin...

CVE-2024-50276

The CVE CVE-2024-50276 affects the Linux kernel net/ethernet/vertexcom/mse102x driver (mse102x.c). The root cause is a double-free of the TX skb: when expanding the TX skb, the code could free the original skb again in mse102x_tx_work(), causing a crash. The fix is to free the temporary skb inste...