CVE-2024-50167

A flaw was found in the be2net network driver within the Linux kernel. This vulnerability occurs when the be_xmit() function fails to properly release network packet buffers under specific error conditions. This oversight can lead to a memory leak, which, if continuously triggered, could result in system instability or a Denial of Service (DoS) for affected systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if the system does not utilize Broadcom NetXtreme II 10 Gigabit Ethernet adapters, the be2net kernel module can be prevented from loading. This can be achieved by creating a blacklist rule.

Create a file named /etc/modprobe.d/blacklist-be2net.conf with the following content:

blacklist be2net

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.

dracut -f -v
reboot

This mitigation may impact network functionality if Broadcom NetXtreme II adapters are in use.