CVE-2024-50206
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, in the net: ethernet: mtk_eth_soc module, there is a vulnerability causing memory corruption during fq dma init. The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers touches too many descriptors, corrupting unrelated memory. The fix corrects the loop iteration count.
Risk Assessment
The risk is potential memory corruption, which could lead to system crash or unpredictable behavior in the ethernet driver.
Recommendation
It is recommended to apply the kernel patch that corrects the loop iteration count and update systems to a kernel version containing this fix.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the loop iteration count accordingly.