Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-56606

af_packet: avoid erroring out after sock_init_data() in packet_create()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.66, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From b013840810c221f2b0cf641d01531526052dc1fb · fixed in 71b22837a5e55ac27d6a14b9cdf2326587405c4f; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in 1dc1e1db927056cb323296e2294a855cd003dfe7; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in 132e615bb1d7cdec2d3cfbdec2efa630e923fd21; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in a6cf750b737374454a4e03a5ed449a3eb0c96414; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in 157f08db94123e2ba56877dd0ac88908b13a5dd0; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in fd09880b16d33aa5a7420578e01cd79148fa9829; From b013840810c221f2b0cf641d01531526052dc1fb · fixed in 46f2a11cb82b657fd15bab1c47821b635e03838b

  • Linux Linux

    3.14

  • KernelLinux

    From 3.14.0 · fixed in 5.4.287; From 5.5.0 · fixed in 5.10.231; From 5.11.0 · fixed in 5.15.174; From 5.16.0 · fixed in 6.1.120; From 6.2.0 · fixed in 6.6.66; From 6.7.0 · fixed in 6.12.5

References 7

git.kernel.org