# CVE-2024-49997: linux: In the Linux kernel, the following vulnerability has been resolved:  net: ethernet: lantiq_etop: fix memory disclosur...

CVE-2024-49997 is fixed in 19 products on 1 platform, first by DEBIAN-CVE-2024-49997, released October 21, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-49997
- Priority: High
- CVSS: 7.5 (high)
- EPSS: 0.0106
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 21, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  net: ethernet: lantiq_etop: fix memory disclosure  When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer.  In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions.  Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | bpftool ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.4.17-2136.338.4.1.el8uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-doc ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.338.4.1.el7uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.338.4.1.el7uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.115-1 | [DEBIAN-CVE-2024-49997](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49997.md) | Oct 21, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.11.4-1 | [DEBIAN-CVE-2024-49997](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49997.md) | Oct 21, 2024 |
| Linux | linux Debian 14 | 6.11.4-1 | [DEBIAN-CVE-2024-49997](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49997.md) | Oct 21, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.338.4.1.el7uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.338.4.1.el7uek | [ELSA-2024-12884](https://patchblox.com/security/data/fix/linux/elsa-2024-12884.md) | Dec 16, 2024 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.