#VU99156 Buffer overflow in Linux kernel - CVE-2024-49973

Vulnerability identifier: #VU99156

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49973

CWE-ID: CWE-119

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the drivers/net/ethernet/realtek/r8169_main.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
http://git.kernel.org/stable/c/991e8b0bab669b7d06927c3e442b3352532e8581
http://git.kernel.org/stable/c/21950321ad33d7613b1453f4c503d7b1871deb61
http://git.kernel.org/stable/c/fe44b3bfbf0c74df5712f44458689d0eccccf47d
http://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf
http://git.kernel.org/stable/c/92bc8647b4d65f4d4bf8afdb206321c1bc55a486
http://git.kernel.org/stable/c/585c048d15ed559f20cb94c8fa2f30077efa4fbc
http://git.kernel.org/stable/c/ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.