High 8.8Published Jul 29, 2024

CVE-2024-41046net: ethernet: lantiq_etop: fix double free in detach

Updated under an hour ago (Oct 28, 2026, 1:50 PM ET)

Does this affect you?

It affects Linux and 8 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.

CVSS: 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 1a2db00a554cfda57c397cce79b2804bf9633fec; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before 907443174e76b854d28024bd079f0e53b94dc9a1; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 22b16618a80858b3a9d607708444426948cc4ae1; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 9d23909ae041761cb2aa0c3cb1748598d8b6bc54; 504d4721ee8e432af4b5f196a08af38bc4dac5fe builds before 84aaaa796a19195fc59290154fef9aeb1fba964f; from 504d4721ee8e432af4b5f196a08af38bc4dac5fe before e1533b6319ab9c3a97dad314dd88b3783bc41b69	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - BIOS siemens:simatic_s7_1500_tm_mfp_bios (from the name)	all versions	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.0 before 4.19.318; from 4.20 before 5.4.280; from 5.5 before 5.10.222; from 5.11 before 5.15.163; from 5.16 before 6.1.100; from 6.2 before 6.6.41; from 6.7 before 6.9.10	NVD

References

References

https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec	patch
https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1	patch
https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1	patch
https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156	patch
https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3	patch
https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54	patch
https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f	patch
https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html
1–10 of 13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.