CVE-2024-50167

Summary

CVE-2024-50167 is a recently identified vulnerability affecting the Linux kernel. Specifically, in the be2net function, the be_xmit() function did not properly handle the case where be_xmit_enqueue() failed, leading to a potential memory leak. This issue was resolved by adding dev_kfree_skb_any() to free the memory in question when be_xmit_enqueue() fails, preventing potential memory exhaustion and potential denial-of-service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.