PT-2024-9077 · Linux+9 · Linux Kernel+9
Ken Milmore
·
Published
2024-05-23
·
Updated
2025-09-29
·
CVE-2024-38586
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the r8169 component of the Linux kernel, which can cause ring buffer corruption when transmitting small fragmented packets. This is due to the
rtl8169 start xmit() function not noticing changes to nr frags when packets are padded to work around hardware quirks in rtl8169 tso csum v2(). The problem leads to invalid entries being inserted into the transmit ring buffer, resulting in calls to dma unmap single() with a null address. To fix this, the inspection of nr frags is postponed until after any padding has been applied.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu