NetSight
IP …
high7.8

CVE-2024-56601

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches th…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.287
from 5.5 before 5.10.231
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.66
from 6.7 before 6.12.5

Weakness classification

CWE-416

References