CVE-2024-50276

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: vertexcom: mse102x: Fix possible double free of TX skb

The scope of the TX skb is wider than just mse102x_tx_frame_spi(),

so in case the TX skb room needs to be expanded, we should free the

the temporary skb instead of the original skb. Otherwise the original

TX skb pointer would be freed again in mse102x_tx_work(), which leads

to crashes:

Internal error: Oops: 0000000096000004 [#2] PREEMPT SMP

CPU: 0 PID: 712 Comm: kworker/0:1 Tainted: G D 6.6.23

Hardware name: chargebyte Charge SOM DC-ONE (DT)

Workqueue: events mse102x_tx_work [mse102x]

pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : skb_release_data+0xb8/0x1d8

lr : skb_release_data+0x1ac/0x1d8

sp : ffff8000819a3cc0

x29: ffff8000819a3cc0 x28: ffff0000046daa60 x27: ffff0000057f2dc0

x26: ffff000005386c00 x25: 0000000000000002 x24: 00000000ffffffff

x23: 0000000000000000 x22: 0000000000000001 x21: ffff000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References