In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: fix memory corruption during fq dma init
The loop responsible for allocating up to MTKFQDMA_LENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the loop iteration count accordingly.
[
{
"id": "CVE-2024-50206-4d1d2149",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68cd084e3ec1512cd383cb3e9cf0ab7ab413724c",
"target": {
"file": "drivers/net/ethernet/mediatek/mtk_eth_soc.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"60437228619555695756904866358934348594",
"243806838989215443646087031633684373702",
"265589910946392979551784865102256708975",
"213827113013218624539597085116176180723"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-50206-81b8cb91",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88806efc034a9830f483963326b99930ad519af1",
"target": {
"file": "drivers/net/ethernet/mediatek/mtk_eth_soc.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"60437228619555695756904866358934348594",
"243806838989215443646087031633684373702",
"265589910946392979551784865102256708975",
"213827113013218624539597085116176180723"
],
"threshold": 0.9
}
}
]