CVE-2024-50190

In the Linux kernel, the following vulnerability has been resolved: ice: fix memleak in ice_init_tx_topology() Fix leak of the FW blob (DDP pkg). Make ice_cfg_tx_topo() const-correct, so ice_init_tx_topology() can avoid copying whole FW blob. Copy just the topology section, and only when needed. Reuse the buffer allocated for the read of the current topology. This was found by kmemleak, with the following trace for each PF: [<ffffffff8761044d>] kmemdup_noprof+0x1d/0x50 [<ffffffffc0a0a480>] ice_init_ddp_config+0x100/0x220 [ice] [<ffffffffc0a0da7f>] ice_init_dev+0x6f/0x200 [ice] [<ffffffffc0a0dc49>] ice_init+0x29/0x560 [ice] [<ffffffffc0a10c1d>] ice_probe+0x21d/0x310 [ice] Constify ice_cfg_tx_topo() @buf parameter. This cascades further down to few more functions.

• CWE-401
• CWE-401

• https://git.kernel.org/stable/c/43544b4e30732c3d88f423252281915d5bc739b6Patch
• https://git.kernel.org/stable/c/c188afdc36113760873ec78cbc036f6b05f77621Patch

Published

Nov 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50185In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50186In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50187In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50188In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50189In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5019In WhatsUp Gold versions released before 2023.1.3,  an unau…7.5
• CVE-2024-50191In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50192In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-50193In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-50194In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50195In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50196In the Linux kernel, the following vulnerability has been re…5.5