Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-56601

net: inet: do not leave a dangling sk pointer in inet_create()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.66, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in f8a3f255f7509a209292871715cda03779640c8d; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 2bc34d8c8898ae9fddf4612501aabb22d76c2b2c; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 3e8258070b0f2aba66b3ef18883de229674fb288; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 25447c6aaa7235f155292b0c58a067347e8ae891; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 691d6d816f93b2a1008c14178399061466e674ef; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 9365fa510c6f82e3aa550a09d0c5c6b44dbc78ff

  • Linux Linux

    2.6.12

  • KernelLinux

    From 2.6.12 · fixed in 5.4.287; From 5.5.0 · fixed in 5.10.231; From 5.11.0 · fixed in 5.15.174; From 5.16.0 · fixed in 6.1.120; From 6.2.0 · fixed in 6.6.66; From 6.7.0 · fixed in 6.12.5

References 7

git.kernel.org