CVE-2024-56601
Dec. 27, 2024, 3:15 p.m.
Tags
Product(s) Impacted
Linux kernel
Description
In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.
Weaknesses
Date
Published: Dec. 27, 2024, 3:15 p.m.
Last Modified: Dec. 27, 2024, 3:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/
416baaa9-dc9f-4396-8d5f-8c081fb06d67