NetSight
IP …
high7.8

CVE-2024-56606

In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_dat…

Impact

In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.287
from 5.5 before 5.10.231
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.66
from 6.7 before 6.12.5

Weakness classification

CWE-416

References