CVE-2024-50167

be2net: fix potential memory leak in be_xmit()

State: Published
Severity: 5.5 Medium
Published: Nov 7, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

be2net: fix potential memory leak in be_xmit()

The be_xmit() returns NETDEV_TX_OK without freeing skb in case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	760c295e0e8d982917d004c9095cff61c0cbd803 to before 941026023c256939943a47d1c66671526befbb26Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 6b7ce8ee01c33c380aaa5077ff25215492e7eb0eAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 77bc881d370e850b7f3cd2b5eae67d596b40efbcAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 919ab6e2370289a2748780f44a43333cd3878aa7Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 4c5f170ef4f85731a4d43ad9a6ac51106c0946beAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 641c1beed52bf3c6deb0193fe4d38ec9ff75d2aeAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before e86a79b804e26e3b7f1e415b22a085c0bb7ea3d3Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before e4dd8bfe0f6a23acd305f9b892c00899089bd621Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

760c295e0e8d982917d004c9095cff61c0cbd803 to before 941026023c256939943a47d1c66671526befbb26Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 6b7ce8ee01c33c380aaa5077ff25215492e7eb0eAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 77bc881d370e850b7f3cd2b5eae67d596b40efbcAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 919ab6e2370289a2748780f44a43333cd3878aa7Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 4c5f170ef4f85731a4d43ad9a6ac51106c0946beAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 641c1beed52bf3c6deb0193fe4d38ec9ff75d2aeAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before e86a79b804e26e3b7f1e415b22a085c0bb7ea3d3Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before e4dd8bfe0f6a23acd305f9b892c00899089bd621Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.