PT-2024-29241 · Linux+11 · Linux Kernel+11

Nick Child · Published 2024-06-20 · Updated 2026-03-14 · CVE-2024-41066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ibmvnic driver in the Linux kernel, where a memory leak could occur due to the lack of a check to ensure that the skb address is null. This could cause tcp congestion control to stop sending packets, eventually leading to ETIMEDOUT. The driver has been updated to add a conditional check to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Information Disclosure

Weakness Enumeration

CWE-401

CWE-200

Related Identifiers

ALSA-2024:8856

ALSA-2024:8870

ALSA-2025_16880

ALT-PU-2024-11855

ALT-PU-2024-11863

ALT-PU-2024-13121

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-48993

BDU:2025-03013

CESA-2024_8856

CESA-2024_8870

CVE-2024-41066

DLA-4008-1

INFSA-2024_8856

INFSA-2024_8870

MGASA-2024-0277

MGASA-2024-0278

OESA-2024-1961

OESA-2024-1962

OESA-2024-2031

OESA-2024-2076

OPENSUSE-SU-2024_2947-1

RHSA-2024:8157

RHSA-2024:8158

RHSA-2024:8856

RHSA-2024:8870

RHSA-2024:9546

RHSA-2024_8856

RHSA-2024_8870

RLSA-2024:8856

RLSA-2024:8870

SUSE-SU-2024:2892-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7089-1

USN-7089-2

USN-7089-3

USN-7089-4

USN-7089-5

USN-7089-6

USN-7089-7

USN-7090-1

USN-7095-1

USN-7156-1

USN-7233-1

USN-7233-2

USN-7233-3

USN-7262-1

USN-7262-2

USN-7288-1

USN-7288-2

USN-7289-1

USN-7289-2

USN-7289-3

USN-7289-4

USN-7291-1

USN-7293-1

USN-7294-1

USN-7294-2

USN-7294-3

USN-7294-4

USN-7295-1

USN-7305-1

USN-7308-1

USN-7331-1

USN-7388-1

USN-7389-1

USN-7390-1

USN-7393-1

USN-7401-1

USN-7413-1

USN-7458-1

USN-7539-1

USN-7540-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3648

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41066.json · Exploit
• https://ubuntu.com/security/CVE-2024-41097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46705 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36900 · Security Note
• https://ubuntu.com/security/CVE-2024-42126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43876 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44938 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40902 · Security Note
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7294-3 · Vendor Advisory