CVE-2024-41046

net: ethernet: lantiq_etop: fix double free in detach

State: Published
Severity: 8.8 High
Published: Jul 29, 2024
Updated: Oct 15, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: lantiq_etop: fix double free in detach

The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 1a2db00a554cfda57c397cce79b2804bf9633fecAffected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 907443174e76b854d28024bd079f0e53b94dc9a1Affected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 22b16618a80858b3a9d607708444426948cc4ae1Affected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156Affected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3Affected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 9d23909ae041761cb2aa0c3cb1748598d8b6bc54Affected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 84aaaa796a19195fc59290154fef9aeb1fba964fAffected 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before e1533b6319ab9c3a97dad314dd88b3783bc41b69Affected
LinuxLinux	3.0Affected before 3.0Not affected 4.19.318 through 4.19.Not affected 5.4.280 through 5.4.Not affected 5.10.222 through 5.10.Not affected 5.15.163 through 5.15.Not affected 6.1.100 through 6.1.Not affected 6.6.41 through 6.6.Not affected 6.9.10 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 1a2db00a554cfda57c397cce79b2804bf9633fecAffected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 907443174e76b854d28024bd079f0e53b94dc9a1Affected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 22b16618a80858b3a9d607708444426948cc4ae1Affected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156Affected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3Affected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 9d23909ae041761cb2aa0c3cb1748598d8b6bc54Affected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 84aaaa796a19195fc59290154fef9aeb1fba964fAffected
504d4721ee8e432af4b5f196a08af38bc4dac5fe to before e1533b6319ab9c3a97dad314dd88b3783bc41b69Affected

LinuxLinux

3.0Affected
before 3.0Not affected
4.19.318 through 4.19.*Not affected
5.4.280 through 5.4.*Not affected
5.10.222 through 5.10.*Not affected
5.15.163 through 5.15.*Not affected
6.1.100 through 6.1.*Not affected
6.6.41 through 6.6.*Not affected
6.9.10 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.