PT-2024-34000 · Linux+6 · Linux Kernel+6

Wang Hai · Published 2024-11-07 · Updated 2026-03-14 · CVE-2024-50168

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: A memory leak issue was found in the Linux kernel's net/sun3 82586 module, specifically in the sun3 82586 send packet() function. This function returns NETDEV TX OK without freeing the skb in case of skb->len being too long. To fix this, dev kfree skb() was added.

Recommendations: For versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the sun3 82586 send packet() function until a patch is available.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2024-15251

ALT-PU-2024-15739

ALT-PU-2024-16172

ALT-PU-2024-17099

ALT-PU-2024-17211

ALT-PU-2025-12647

AZL-52923

AZL-52951

BDU:2025-03485

CVE-2024-50168

DLA-4008-1

MGASA-2024-0368

MGASA-2024-0369

OESA-2024-2570

OESA-2025-1078

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

USN-7276-1

USN-7277-1

USN-7288-1

USN-7288-2

USN-7289-1

USN-7289-2

USN-7289-3

USN-7289-4

USN-7291-1

USN-7293-1

USN-7294-1

USN-7294-2

USN-7294-3

USN-7294-4

USN-7295-1

USN-7305-1

USN-7308-1

USN-7310-1

USN-7331-1

USN-7388-1

USN-7389-1

USN-7393-1

USN-7413-1

USN-7458-1

USN-7468-1

USN-7539-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 1887

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50168.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://git.kernel.org/stable/c/84f2bac74000dbb7a177d9b98a17031ec8d07ec5 · Patch
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7291-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://git.kernel.org/stable/c/1a17a4ac2d57102497fac53b53c666dba6a0c20d · Patch
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory