CVE-2024-50206
A critical memory corruption flaw was found in the Linux kernel's Ethernet driver for MediaTek SoCs. The bug could allow an attacker to corrupt memory during DMA initialization, potentially leading to arbitrary code execution. The issue has been fixed in recent kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.12 and earlier versions that use the MediaTek Ethernet driver (mtk_eth_soc). Typical users include Linux system administrators and embedded device operators.
Real-world impact
An attacker could corrupt memory and potentially execute arbitrary code, leading to full system compromise.
Why this severity
The CVSS score of 9.8 reflects the vulnerability's ability to be exploited remotely with no authentication, no user interaction, and full impact on confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to version 6.12 or later.
- 02Reboot the system to load the new kernel.
NVD description
Timeline
- Nov 8, 2024 · Nov 8, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.