Vulnerability · Published Jun 19, 2024 · Assigned by Linux

CVE-2024-38586r8169: Fix possible ring buffer corruption on fragmented Tx packets.

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 83.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring buffer, subsequently leading to calls to dma_unmap_single() with a null address. This was caused by rtl8169_start_xmit() not noticing changes to nr_frags which may occur when small packets are padded (to work around hardware quirks) in rtl8169_tso_csum_v2(). To fix this, postpone inspecting nr_frags until after any padding has been applied.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9bpftool7.3.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-abi-stablelists4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-abi-stablelists5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-cross-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-cross-headers5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-debug4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-debug-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-debug-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-debug-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-debug-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-devel-matched5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-doc4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-doc5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-headers5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-debug4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-debug-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-rt-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-tools4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-tools-libs4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools-libs5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-uki-virt5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-zfcpdump4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9libperf5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8perf4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9perf5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:8python3-perf4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9python3-perf5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9rtla5.14.0-427.26.1.el9_4ALSA-2024:4583
AlmaLinux:9rv5.14.0-427.26.1.el9_4ALSA-2024:4583
Debian:12linux6.1.94-1DEBIAN-CVE-2024-38586
Debian:13linux6.8.12-1DEBIAN-CVE-2024-38586
Debian:14linux6.8.12-1DEBIAN-CVE-2024-38586
Rocky Linux:8kernel0:4.18.0-553.27.1.el8_10RLSA-2024:8856
Rocky Linux:9kernel0:5.14.0-427.26.1.el9_4RLSA-2024:4583
Rocky Linux:8kernel-rt0:4.18.0-553.27.1.rt7.368.el8_10RLSA-2024:8870
Ubuntu:22.04:LTSlinux5.15.0-121.131UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux5.15.0-121.131USN-7007-1
Ubuntu:24.04:LTSlinux6.8.0-40.40UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws5.15.0-1069.75UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws5.15.0-1069.75USN-7007-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1013.14UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1013.14~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure5.15.0-1072.81USN-7009-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1072.81UBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-azure6.8.0-1012.14UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1012.14~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1072.81.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1072.81.1USN-7009-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp5.15.0-1068.76UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp5.15.0-1068.76USN-7007-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1012.13UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1012.13~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gke5.15.0-1066.72UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gke5.15.0-1066.72USN-7007-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1008.11UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1052.59UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1052.59USN-7007-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-40.40~22.04.3UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-ibm5.15.0-1062.65UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-ibm5.15.0-1062.65USN-7007-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1010.10UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1010.10~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1064.70USN-7007-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1064.70UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-kvm5.15.0-1066.71USN-7007-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1066.71UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-121.131UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-121.131USN-7007-3
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-40.40.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-40.40.1~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1064.65USN-7007-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1064.65UBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1011.11UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1011.11~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1011.11.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1028.28UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1016.16UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1010.10UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oracle5.15.0-1067.73USN-7007-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1067.73UBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-oracle6.8.0-1010.10UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1010.10~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-raspi5.15.0-1062.65UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-raspi5.15.0-1062.65USN-7007-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1009.10UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-38586
Ubuntu:24.04:LTSlinux-riscv6.8.0-40.40.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-40.40.1~22.04.1UBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-38586
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1035.39UBUNTU-CVE-2024-38586

Affected products (as reported)

VendorProductVersions
Linux Linux 9020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before 61c1c98e2607120ce9c3fa1bf75e6da909712b279020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before b6d21cf40de103d63ae78551098a7c06af8c98dd9020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before 0c48185a95309556725f818b82120bb74e9c627d9020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before 68222d7b4b72aa321135cd453dac37f00ec41fd19020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before 078d5b7500d70af2de6b38e226b03f0b932026a69020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before 54e7a0d111240c92c0f02ceba6eb8f26bf6d64799020845fb5d6bb4876a38fdf1259600e7d9a63d4 – before c71e3a5cffd5309d7f84444df03d5b72600cc417
Linux Linux 5.7

References