Back to CVE records
High 8.8Published Jul 29, 2024
CVE-2024-41046net: ethernet: lantiq_etop: fix double free in detach
Updated under an hour ago ()
Does this affect you?
It affects Linux and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 1a2db00a554cfda57c397cce79b2804bf9633fec; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before 907443174e76b854d28024bd079f0e53b94dc9a1; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 22b16618a80858b3a9d607708444426948cc4ae1; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 9d23909ae041761cb2aa0c3cb1748598d8b6bc54; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 84aaaa796a19195fc59290154fef9aeb1fba964f; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before e1533b6319ab9c3a97dad314dd88b3783bc41b69 | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.1 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | all versions not affected | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.1 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - BIOS siemens:simatic_s7_1500_tm_mfp_bios (from the name) | all versions | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 3.0 before 4.19.318; from 4.20 before 5.4.280; from 5.5 before 5.10.222; from 5.11 before 5.15.163; from 5.16 before 6.1.100; from 6.2 before 6.6.41; from 6.7 before 6.9.10 | NVD |
References
- https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fecpatch
- https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1patch
- https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1patch
- https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156patch
- https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3patch
- https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54patch
- https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964fpatch
- https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-503939.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.