NetSight
IP …
high7.0

CVE-2024-56602

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data()…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data() attaches the allocated sk object to the provided sock object. If ieee802154_create() fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow use-after-free. Clear the sk pointer in the sock object on error.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.287
from 5.5 before 5.10.231
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.66
from 6.7 before 6.12.5

Weakness classification

CWE-416

References