7.8 High

CVE-2024-49973 In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125…

Description

In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated memory area is big enough to hold all of the tally counter values, even if we use only parts of it.

Affected products and versions

Product	Affected versions	Fixed in
Linux 6.12	earliest → < 6.12	6.12
Linux 6.11	earliest → < 6.11.3	6.11.3
Linux 6.10	earliest → < 6.10.14	6.10.14
Linux 6.6	earliest → < 6.6.55	6.6.55
Linux 6.1	earliest → < 6.1.113	6.1.113
Linux 5.15	earliest → < 5.15.168	5.15.168
Linux 5.10	earliest → < 5.10.227	5.10.227
Linux	5.4	5.4.285
RUGGEDCOM RST2428P	Versions not published

Show the 3 other branches

Product	Affected versions	Fixed in
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family	Versions not published
SCALANCE XCM-/XRM-/XCH-/XRH-300 family	Versions not published
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1	earliest → < 1.1.1	1.1.1