CVE-2024-50171

net: systemport: fix potential memory leak in bcm_sysport_xmit()

State: Published
Severity: 5.5 Medium
Published: Nov 7, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: systemport: fix potential memory leak in bcm_sysport_xmit()

The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	80105befdb4b8cea924711b40b2462b87df65b62 to before 8e81ce7d0166a2249deb6d5e42f28a8b8c9ea72fAffected 80105befdb4b8cea924711b40b2462b87df65b62 to before 31701ef0c4547973991ff63596c927f841dfd133Affected 80105befdb4b8cea924711b40b2462b87df65b62 to before b6321146773dcbbc372a54dbada67e0b50e0a25cAffected 80105befdb4b8cea924711b40b2462b87df65b62 to before 5febfc545389805ce83d37f9f4317055b26dd7d7Affected 80105befdb4b8cea924711b40b2462b87df65b62 to before 533d2f30aef272dade17870a509521c3afc38a03Affected 80105befdb4b8cea924711b40b2462b87df65b62 to before 4b70478b984af3c9d0279c121df5ff94e2533dbdAffected 80105befdb4b8cea924711b40b2462b87df65b62 to before 7d5030a819c3589cf9948b1eee397b626ec590f5Affected 80105befdb4b8cea924711b40b2462b87df65b62 to before c401ed1c709948e57945485088413e1bb5e94bd1Affected
LinuxLinux	3.16Affected before 3.16Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

80105befdb4b8cea924711b40b2462b87df65b62 to before 8e81ce7d0166a2249deb6d5e42f28a8b8c9ea72fAffected
80105befdb4b8cea924711b40b2462b87df65b62 to before 31701ef0c4547973991ff63596c927f841dfd133Affected
80105befdb4b8cea924711b40b2462b87df65b62 to before b6321146773dcbbc372a54dbada67e0b50e0a25cAffected
80105befdb4b8cea924711b40b2462b87df65b62 to before 5febfc545389805ce83d37f9f4317055b26dd7d7Affected
80105befdb4b8cea924711b40b2462b87df65b62 to before 533d2f30aef272dade17870a509521c3afc38a03Affected
80105befdb4b8cea924711b40b2462b87df65b62 to before 4b70478b984af3c9d0279c121df5ff94e2533dbdAffected
80105befdb4b8cea924711b40b2462b87df65b62 to before 7d5030a819c3589cf9948b1eee397b626ec590f5Affected
80105befdb4b8cea924711b40b2462b87df65b62 to before c401ed1c709948e57945485088413e1bb5e94bd1Affected

LinuxLinux

3.16Affected
before 3.16Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.