CVE-2024-50171

net: systemport: fix potential memory leak in bcm_sysport_xmit()

Description

In the Linux kernel, the following vulnerability has been resolved: net: systemport: fix potential memory leak in bcm_sysport_xmit() The bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb in case of dma_map_single() fails, add dev_kfree_skb() to fix it.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.03%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/8e81ce7d0166a2249deb6d5e42f28a8b8c9ea72f patch
https://git.kernel.org/stable/c/31701ef0c4547973991ff63596c927f841dfd133 patch
https://git.kernel.org/stable/c/b6321146773dcbbc372a54dbada67e0b50e0a25c patch
https://git.kernel.org/stable/c/5febfc545389805ce83d37f9f4317055b26dd7d7 patch
https://git.kernel.org/stable/c/533d2f30aef272dade17870a509521c3afc38a03 patch
https://git.kernel.org/stable/c/4b70478b984af3c9d0279c121df5ff94e2533dbd patch
https://git.kernel.org/stable/c/7d5030a819c3589cf9948b1eee397b626ec590f5 patch
https://git.kernel.org/stable/c/c401ed1c709948e57945485088413e1bb5e94bd1 patch

Frequently Asked Questions

What is the severity of CVE-2024-50171?
CVE-2024-50171 has been scored as a medium severity vulnerability.
How to fix CVE-2024-50171?
To fix CVE-2024-50171, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-50171 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-50171 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-50171?
CVE-2024-50171 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.