CVE-2024-56600

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56600
In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attaches the allocated sk pointer to the provided sock object. If inet6_create() fails later, the sk object is released, but the sock object retains the dangling sk pointer, which may cause use-after-free later. Clear the sock sk pointer on error.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/276a473c956fb55a6f3affa9ff232e10fffa7b43 Patch
https://git.kernel.org/stable/c/35360255ca30776dee34d9fa764cffa24d0a5f65 Patch
https://git.kernel.org/stable/c/706b07b7b37f886423846cb38919132090bc40da Patch
https://git.kernel.org/stable/c/79e16a0d339532ea832d85798eb036fc4f9e0cea Patch
https://git.kernel.org/stable/c/9df99c395d0f55fb444ef39f4d6f194ca437d884 Patch
https://git.kernel.org/stable/c/f2709d1271cfdf55c670ab5c5982139ab627ddc7 Patch
https://git.kernel.org/stable/c/f44fceb71d72d29fb00e0ac84cdf9c081b03cd06 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Jan 2025, 15:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: inet6: no deje un puntero sk colgando en inet6_create() sock_init_data() adjunta el puntero sk asignado al objeto sock proporcionado. Si inet6_create() falla más tarde, se libera el objeto sk, pero el objeto sock conserva el puntero sk colgando, lo que puede provocar un use-after-free más adelante. Borre el puntero sk sock en caso de error.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-416
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/276a473c956fb55a6f3affa9ff232e10fffa7b43 - () https://git.kernel.org/stable/c/276a473c956fb55a6f3affa9ff232e10fffa7b43 - Patch
References () https://git.kernel.org/stable/c/35360255ca30776dee34d9fa764cffa24d0a5f65 - () https://git.kernel.org/stable/c/35360255ca30776dee34d9fa764cffa24d0a5f65 - Patch
References () https://git.kernel.org/stable/c/706b07b7b37f886423846cb38919132090bc40da - () https://git.kernel.org/stable/c/706b07b7b37f886423846cb38919132090bc40da - Patch
References () https://git.kernel.org/stable/c/79e16a0d339532ea832d85798eb036fc4f9e0cea - () https://git.kernel.org/stable/c/79e16a0d339532ea832d85798eb036fc4f9e0cea - Patch
References () https://git.kernel.org/stable/c/9df99c395d0f55fb444ef39f4d6f194ca437d884 - () https://git.kernel.org/stable/c/9df99c395d0f55fb444ef39f4d6f194ca437d884 - Patch
References () https://git.kernel.org/stable/c/f2709d1271cfdf55c670ab5c5982139ab627ddc7 - () https://git.kernel.org/stable/c/f2709d1271cfdf55c670ab5c5982139ab627ddc7 - Patch
References () https://git.kernel.org/stable/c/f44fceb71d72d29fb00e0ac84cdf9c081b03cd06 - () https://git.kernel.org/stable/c/f44fceb71d72d29fb00e0ac84cdf9c081b03cd06 - Patch

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-02-11 16:15

NVD link : CVE-2024-56600

Mitre link : CVE-2024-56600

CVE.ORG link : CVE-2024-56600

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free