ByteOS Network

NVD Vulnerability Details :

CVE-2024-56603

Modified

Source-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-27 Dec, 2024 | 15:15

Updated At-11 Feb, 2025 | 16:15

In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() frees the allocated sk object, but sock_init_data() has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 5.4.287(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.5(inclusive) to 5.10.231(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.11(inclusive) to 5.15.174(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.16(inclusive) to 6.1.120(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 6.2(inclusive) to 6.6.66(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 6.7(inclusive) to 6.12.5(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov
CWE-416	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://git.kernel.org/stable/c/1fe625f12d090d69f3f084990c7e4c1ff94bfe5f	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/5947c9ac08f0771ea8ed64186b0d52e9029cb6c0	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/811a7ca7320c062e15d0f5b171fe6ad8592d1434	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/884ae8bcee749be43a071d6ed2d89058dbd2425c	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/8df832e6b945e1ba61467d7f1c9305e314ae92fe	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/ce39b5576785bb3e66591145aad03d66bc3e778d	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/db207d19adbac96058685f6257720906ad41d215	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History