CVE-2024-56606

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56606
In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/132e615bb1d7cdec2d3cfbdec2efa630e923fd21 Patch
https://git.kernel.org/stable/c/157f08db94123e2ba56877dd0ac88908b13a5dd0 Patch
https://git.kernel.org/stable/c/1dc1e1db927056cb323296e2294a855cd003dfe7 Patch
https://git.kernel.org/stable/c/46f2a11cb82b657fd15bab1c47821b635e03838b Patch
https://git.kernel.org/stable/c/71b22837a5e55ac27d6a14b9cdf2326587405c4f Patch
https://git.kernel.org/stable/c/a6cf750b737374454a4e03a5ed449a3eb0c96414 Patch
https://git.kernel.org/stable/c/fd09880b16d33aa5a7420578e01cd79148fa9829 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Jan 2025, 21:46

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/132e615bb1d7cdec2d3cfbdec2efa630e923fd21 - () https://git.kernel.org/stable/c/132e615bb1d7cdec2d3cfbdec2efa630e923fd21 - Patch
References () https://git.kernel.org/stable/c/157f08db94123e2ba56877dd0ac88908b13a5dd0 - () https://git.kernel.org/stable/c/157f08db94123e2ba56877dd0ac88908b13a5dd0 - Patch
References () https://git.kernel.org/stable/c/1dc1e1db927056cb323296e2294a855cd003dfe7 - () https://git.kernel.org/stable/c/1dc1e1db927056cb323296e2294a855cd003dfe7 - Patch
References () https://git.kernel.org/stable/c/46f2a11cb82b657fd15bab1c47821b635e03838b - () https://git.kernel.org/stable/c/46f2a11cb82b657fd15bab1c47821b635e03838b - Patch
References () https://git.kernel.org/stable/c/71b22837a5e55ac27d6a14b9cdf2326587405c4f - () https://git.kernel.org/stable/c/71b22837a5e55ac27d6a14b9cdf2326587405c4f - Patch
References () https://git.kernel.org/stable/c/a6cf750b737374454a4e03a5ed449a3eb0c96414 - () https://git.kernel.org/stable/c/a6cf750b737374454a4e03a5ed449a3eb0c96414 - Patch
References () https://git.kernel.org/stable/c/fd09880b16d33aa5a7420578e01cd79148fa9829 - () https://git.kernel.org/stable/c/fd09880b16d33aa5a7420578e01cd79148fa9829 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: af_packet: evitar errores después de sock_init_data() en packet_create() Después de sock_init_data(), el objeto sk asignado se adjunta al objeto sock proporcionado. En caso de error, packet_create() libera el objeto sk dejando el puntero colgando en el objeto sock al regresar. Es posible que algún otro código intente usar este puntero y provoque un error de use-after-free.
First Time Linux linux Kernel
Linux
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-02-11 16:15

NVD link : CVE-2024-56606

Mitre link : CVE-2024-56606

CVE.ORG link : CVE-2024-56606

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free