CVE-2024-43861
Qualcomm Atheros QMI WAN Memory Corruption
Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive.
INFO
Published Date :
Aug. 20, 2024, 10:15 p.m.
Last Modified :
Sept. 3, 2024, 1:45 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-43861.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-43861 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-43861 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Sep. 03, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/37c093449704017870604994ba9b813cdb9475a4 No Types Assigned https://git.kernel.org/stable/c/37c093449704017870604994ba9b813cdb9475a4 Patch Changed Reference Type https://git.kernel.org/stable/c/3c90a69533b5bba73401ef884d033ea49ee99662 No Types Assigned https://git.kernel.org/stable/c/3c90a69533b5bba73401ef884d033ea49ee99662 Patch Changed Reference Type https://git.kernel.org/stable/c/7ab107544b777c3bd7feb9fe447367d8edd5b202 No Types Assigned https://git.kernel.org/stable/c/7ab107544b777c3bd7feb9fe447367d8edd5b202 Patch Changed Reference Type https://git.kernel.org/stable/c/c4251a3deccad852b27e60625f31fba6cc14372f No Types Assigned https://git.kernel.org/stable/c/c4251a3deccad852b27e60625f31fba6cc14372f Patch Changed Reference Type https://git.kernel.org/stable/c/c6c5b91424fafc0f83852d961c10c7e43a001882 No Types Assigned https://git.kernel.org/stable/c/c6c5b91424fafc0f83852d961c10c7e43a001882 Patch Changed Reference Type https://git.kernel.org/stable/c/da518cc9b64df391795d9952aed551e0f782e446 No Types Assigned https://git.kernel.org/stable/c/da518cc9b64df391795d9952aed551e0f782e446 Patch Changed Reference Type https://git.kernel.org/stable/c/e87f52225e04a7001bf55bbd7a330fa4252327b5 No Types Assigned https://git.kernel.org/stable/c/e87f52225e04a7001bf55bbd7a330fa4252327b5 Patch Changed Reference Type https://git.kernel.org/stable/c/f2c353227de14b0289298ffc3ba92058c4768384 No Types Assigned https://git.kernel.org/stable/c/f2c353227de14b0289298ffc3ba92058c4768384 Patch Added CWE NIST CWE-401 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.12 up to (excluding) 4.19.320 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.282 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.224 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.165 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.105 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.46 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.5 *cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:* -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 20, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive. Added Reference kernel.org https://git.kernel.org/stable/c/3c90a69533b5bba73401ef884d033ea49ee99662 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/37c093449704017870604994ba9b813cdb9475a4 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e87f52225e04a7001bf55bbd7a330fa4252327b5 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c4251a3deccad852b27e60625f31fba6cc14372f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/da518cc9b64df391795d9952aed551e0f782e446 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/f2c353227de14b0289298ffc3ba92058c4768384 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c6c5b91424fafc0f83852d961c10c7e43a001882 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/7ab107544b777c3bd7feb9fe447367d8edd5b202 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-43861 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-43861
weaknesses.