CVE - CVE-2024-56601

CVE-ID
CVE-2024-56601	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/25447c6aaa7235f155292b0c58a067347e8ae891 URL:https://git.kernel.org/stable/c/25447c6aaa7235f155292b0c58a067347e8ae891 MISC:https://git.kernel.org/stable/c/2bc34d8c8898ae9fddf4612501aabb22d76c2b2c URL:https://git.kernel.org/stable/c/2bc34d8c8898ae9fddf4612501aabb22d76c2b2c MISC:https://git.kernel.org/stable/c/3e8258070b0f2aba66b3ef18883de229674fb288 URL:https://git.kernel.org/stable/c/3e8258070b0f2aba66b3ef18883de229674fb288 MISC:https://git.kernel.org/stable/c/691d6d816f93b2a1008c14178399061466e674ef URL:https://git.kernel.org/stable/c/691d6d816f93b2a1008c14178399061466e674ef MISC:https://git.kernel.org/stable/c/9365fa510c6f82e3aa550a09d0c5c6b44dbc78ff URL:https://git.kernel.org/stable/c/9365fa510c6f82e3aa550a09d0c5c6b44dbc78ff MISC:https://git.kernel.org/stable/c/b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b URL:https://git.kernel.org/stable/c/b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b MISC:https://git.kernel.org/stable/c/f8a3f255f7509a209292871715cda03779640c8d URL:https://git.kernel.org/stable/c/f8a3f255f7509a209292871715cda03779640c8d
Assigning CNA
kernel.org
Date Record Created
20241227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)