CVE-2024-50276 — Double Free in Linux

CWE-415 — Double Free30 documents7 sources
Severity
7.8HIGHNVD
OSV8.8
EPSS
0.0%
top 97.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
LinuxLinux KernelDebian Linux+2 more
Timeline
PublishedNov 19
Latest updateMay 26

Description

In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102x_tx_frame_spi(), so in case the TX skb room needs to be expanded, we should free the the temporary skb instead of the original skb. Otherwise the original TX skb pointer would be freed again in mse102x_tx_work(), which leads to crashes: Internal error: Oops: 0000000096000004 [#2] PREEMPT SMP CPU: 0 PID: 712 Comm: kwor…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages7 packages

▶NVDlinux/linux_kernel5.17 — 6.1.117+3
▶Debianlinux/linux_kernel< 6.1.119-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-58.60+1
▶CVEListV5linux/linux2f207cbf0dd44278af2aa3ff0fc95b0f97cc4e4c — 2cf0e77f5a0aa1ff336aa71743eda55c73902187+4

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

14
OSV
linux-raspi vulnerabilities↗2025-05-26
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-05-20
▶
OSV
linux-azure-nvidia vulnerabilities↗2025-04-28
▶
OSV
linux-hwe-6.8 vulnerabilities↗2025-04-24
▶
OSV
linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracl↗2025-04-23
▶

📋Vendor Advisories

15
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-26
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-05-20
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-04-28
▶
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-04-24
▶
Ubuntu
Linux kernel (Real-time) vulnerabilities↗2025-04-23
▶