CVE-2024-50258

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 9, 2024
Updated: Nov 14, 2024
CWE ID 191

Summary

CVE-2024-50258 is a vulnerability affecting the Linux kernel, which could lead to a crash when configuring small gso_max_size or gso_ipv4_max_size values. This issue arises when the underflow in sk_dst_gso_max_size() function causes sk->sk_gso_max_size to be much larger than the device limits. Consequently, a BUG_ON crash can occur when calculating tcp_skb_pcount_set. To mitigate this vulnerability, a check for the minimum value of gso_max_size and gso_ipv4_max_size is required.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share