Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-56602

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data() attaches the allocated sk object to the provided sock object. If ieee802154_create() fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow use-after-free. Clear the sk pointer in the sock object on error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < 1d5fe782c0ff068d80933f9cfd0fd39d5434bbc9affected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < 14959fd7538b3be6d7617d9e60e404d6a8d4fd1faffected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < 2b46994a6e76c8cc5556772932b9b60d03a55cd8affected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < e8bd6c5f5dc2234b4ea714380aedeea12a781754affected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < b4982fbf13042e3bb33e04eddfea8b1506b5ea65affected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < 03caa9bfb9fde97fb53d33decd7364514e6825cbaffected
  • 9ec7671603573ede31207eb5b0b3e1aa211b2854 to < b4fcd63f6ef79c73cafae8cf4a114def5fc3d80daffected

Linux Linux

Default version status: affected

  • 2.6.31affected
  • 0 to < 2.6.31unaffected
  • 5.4.287 to ≤ 5.4.*unaffected
  • 5.10.231 to ≤ 5.10.*unaffected
  • 5.15.174 to ≤ 5.15.*unaffected
  • 6.1.120 to ≤ 6.1.*unaffected
  • 6.6.66 to ≤ 6.6.*unaffected
  • 6.12.5 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References