---
id: CVE-2024-41046
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: lantiq_etop: fix double free in detach

  The number of the currently released descriptor is never incremented
  which results in the same skb being released…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: lantiq_etop: fix double free in detach

  The number of the currently released descriptor is never incremented
  which results in the same skb being released…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-415
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 3.0, < 4.19.318'
  - 'linux_kernel >= 4.20, < 5.4.280'
  - 'linux_kernel >= 5.5, < 5.10.222'
  - 'linux_kernel >= 5.11, < 5.15.163'
  - 'linux_kernel >= 5.16, < 6.1.100'
  - 'linux_kernel >= 6.2, < 6.6.41'
  - 'linux_kernel >= 6.7, < 6.9.10'
patched:
  - linux_kernel 6.9.10
published: '2024-07-29'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:18:41.680'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-41046'
references:
  - url: 'https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/1a2db00a554cfda57c397cce79b2804bf9633fec'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/22b16618a80858b3a9d607708444426948cc4ae1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/69ad5fa0ce7c548262e0770fc2b726fe7ab4f156'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/84aaaa796a19195fc59290154fef9aeb1fba964f'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/907443174e76b854d28024bd079f0e53b94dc9a1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/9d23909ae041761cb2aa0c3cb1748598d8b6bc54'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e1533b6319ab9c3a97dad314dd88b3783bc41b69'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-355557.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-503939.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-613116.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00452
epssPercentile: 0.3911
ingestedAt: '2026-10-15T03:30:12.726Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T16:22:57.535074Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: lantiq_etop: fix double free in detach

The number of the currently released descriptor is never incremented
which results in the same skb being released multiple times.

## Affected

- `linux_kernel >= 3.0, < 4.19.318`
- `linux_kernel >= 4.20, < 5.4.280`
- `linux_kernel >= 5.5, < 5.10.222`
- `linux_kernel >= 5.11, < 5.15.163`
- `linux_kernel >= 5.16, < 6.1.100`
- `linux_kernel >= 6.2, < 6.6.41`
- `linux_kernel >= 6.7, < 6.9.10`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.9.10`