CVE-2024-50276— net: vertexcom: mse102x: Fix possible double free of TX skb
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-50276
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
net: vertexcom: mse102x: Fix possible double free of TX skb
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102x_tx_frame_spi(), so in case the TX skb room needs to be expanded, we should free the the temporary skb instead of the original skb. Otherwise the original TX skb pointer would be freed again in mse102x_tx_work(), which leads to crashes: Internal error: Oops: 0000000096000004 [#2] PREEMPT SMP CPU: 0 PID: 712 Comm: kworker/0:1 Tainted: G D 6.6.23 Hardware name: chargebyte Charge SOM DC-ONE (DT) Workqueue: events mse102x_tx_work [mse102x] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_release_data+0xb8/0x1d8 lr : skb_release_data+0x1ac/0x1d8 sp : ffff8000819a3cc0 x29: ffff8000819a3cc0 x28: ffff0000046daa60 x27: ffff0000057f2dc0 x26: ffff000005386c00 x25: 0000000000000002 x24: 00000000ffffffff x23: 0000000000000000 x22: 0000000000000001 x21: ffff0000057f2e50 x20: 0000000000000006 x19: 0000000000000000 x18: ffff00003fdacfcc x17: e69ad452d0c49def x16: 84a005feff870102 x15: 0000000000000000 x14: 000000000000024a x13: 0000000000000002 x12: 0000000000000000 x11: 0000000000000400 x10: 0000000000000930 x9 : ffff00003fd913e8 x8 : fffffc00001bc008 x7 : 0000000000000000 x6 : 0000000000000008 x5 : ffff00003fd91340 x4 : 0000000000000000 x3 : 0000000000000009 x2 : 00000000fffffffe x1 : 0000000000000000 x0 : 0000000000000000 Call trace: skb_release_data+0xb8/0x1d8 kfree_skb_reason+0x48/0xb0 mse102x_tx_work+0x164/0x35c [mse102x] process_one_work+0x138/0x260 worker_thread+0x32c/0x438 kthread+0x118/0x11c ret_from_fork+0x10/0x20 Code: aa1303e0 97fffab6 72001c1f 54000141 (f9400660)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于TX skb双重释放。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-50276
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50276
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-11-19 · 88 CVEs total
| CVE-2024-53057 | net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT | |
| CVE-2024-53053 | scsi: ufs: core: Fix another deadlock during RTC update | |
| CVE-2024-53055 | wifi: iwlwifi: mvm: fix 6 GHz scan construction | |
| CVE-2024-53052 | io_uring/rw: fix missing NOWAIT check for O_DIRECT start write | |
| CVE-2024-53048 | ice: fix crash on probe for DPLL enabled E810 LOM | |
| CVE-2024-53049 | slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof | |
| CVE-2024-53047 | mptcp: init: protect sched with rcu_read_lock | |
| CVE-2024-53045 | ASoC: dapm: fix bounds checker error in dapm_widget_list_create | |
| CVE-2024-53046 | arm64: dts: imx8ulp: correct the flexspi compatible string | |
| CVE-2024-53051 | drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability | |
| CVE-2024-53056 | drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() | |
| CVE-2024-53058 | net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data | |
| CVE-2024-53059 | wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() | |
| CVE-2024-53060 | drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported | |
| CVE-2024-53061 | media: s5p-jpeg: prevent buffer overflows | |
| CVE-2024-53062 | media: mgb4: protect driver against spectre | |
| CVE-2024-53064 | idpf: fix idpf_vc_core_init error path | |
| CVE-2024-53063 | media: dvbdev: prevent the risk of out of memory access | |
| CVE-2024-53066 | nfs: Fix KMSAN warning in decode_getfattr_attrs() | |
| CVE-2024-53065 | mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create |
Showing top 20 of 88 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-50276
No comments yet