CVE - CVE-2024-56606

CVE-ID
CVE-2024-56606	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/132e615bb1d7cdec2d3cfbdec2efa630e923fd21 URL:https://git.kernel.org/stable/c/132e615bb1d7cdec2d3cfbdec2efa630e923fd21 MISC:https://git.kernel.org/stable/c/157f08db94123e2ba56877dd0ac88908b13a5dd0 URL:https://git.kernel.org/stable/c/157f08db94123e2ba56877dd0ac88908b13a5dd0 MISC:https://git.kernel.org/stable/c/1dc1e1db927056cb323296e2294a855cd003dfe7 URL:https://git.kernel.org/stable/c/1dc1e1db927056cb323296e2294a855cd003dfe7 MISC:https://git.kernel.org/stable/c/46f2a11cb82b657fd15bab1c47821b635e03838b URL:https://git.kernel.org/stable/c/46f2a11cb82b657fd15bab1c47821b635e03838b MISC:https://git.kernel.org/stable/c/71b22837a5e55ac27d6a14b9cdf2326587405c4f URL:https://git.kernel.org/stable/c/71b22837a5e55ac27d6a14b9cdf2326587405c4f MISC:https://git.kernel.org/stable/c/a6cf750b737374454a4e03a5ed449a3eb0c96414 URL:https://git.kernel.org/stable/c/a6cf750b737374454a4e03a5ed449a3eb0c96414 MISC:https://git.kernel.org/stable/c/fd09880b16d33aa5a7420578e01cd79148fa9829 URL:https://git.kernel.org/stable/c/fd09880b16d33aa5a7420578e01cd79148fa9829
Assigning CNA
kernel.org
Date Record Created
20241227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)