Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-56651

can: hi311x: hi3110_can_ist(): fix potential use-after-free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct operation (i. e. not bus-off). The error count information added to the CAN frame after netif_rx() is a potential use after free, since there is no guarantee that the skb is in the same state. It might be freed or reused. Fix the issue by postponing the netif_rx() call in case of txerr and rxerr reporting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a22bd630cfff496b270211745536e50e98eb3a45 to < 4ad77eb8f2e07bcfa0e28887d3c7dbb732d92cc1affected
  • a22bd630cfff496b270211745536e50e98eb3a45 to < 1128022009444faf49359bd406cd665b177cb643affected
  • a22bd630cfff496b270211745536e50e98eb3a45 to < bc30b2fe8c54694f8ae08a5b8a5d174d16d93075affected
  • a22bd630cfff496b270211745536e50e98eb3a45 to < 9ad86d377ef4a19c75a9c639964879a5b25a433baffected
  • 303733fdab728d34708014b3096dc69ebae6e531affected
  • 410054f1cf75378a6f009359e5952a240102a1a2affected
  • d20bf7e76136fd4c1e47502a1f5773f2290013edaffected
  • 22e382d47de09e865a9214cc5c9f99256e65deaaaffected
  • dcfcd5fc999b1eb7946de1fd031bc3aaf224c5aeaffected
  • 330b0ac34beec4fef8b002549af5bc6d0b6f0836affected
  • f3d865a6b791abbc874739ed702ae64ad2607511affected
  • 4.14.291 to < 4.15affected
  • 4.19.256 to < 4.20affected
  • 5.4.211 to < 5.5affected
  • 5.10.137 to < 5.11affected
  • 5.15.61 to < 5.16affected
  • 5.18.18 to < 5.19affected
  • 5.19.2 to < 5.20affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.120 to ≤ 6.1.*unaffected
  • 6.6.66 to ≤ 6.6.*unaffected
  • 6.12.5 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References