PT-2024-34024 · Linux+3 · Linux Kernel+3
Published
2024-09-10
·
Updated
2025-09-29
·
CVE-2024-50190
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A memory leak issue has been resolved in the Linux kernel, specifically in the
ice init tx topology() function. The leak occurred when copying the whole FW blob, which has been fixed by making the ice cfg tx topo() function const-correct, allowing it to avoid copying the entire blob and instead reuse the buffer allocated for reading the current topology. The issue was discovered using kmemleak, with a provided trace showing the call stack for each PF.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Ubuntu