CVE-2024-56602

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

State: Published
Severity: 7.0 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

sock_init_data() attaches the allocated sk object to the provided sock object. If ieee802154_create() fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow use-after-free.

Clear the sk pointer in the sock object on error.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 1d5fe782c0ff068d80933f9cfd0fd39d5434bbc9Affected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 14959fd7538b3be6d7617d9e60e404d6a8d4fd1fAffected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 2b46994a6e76c8cc5556772932b9b60d03a55cd8Affected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before e8bd6c5f5dc2234b4ea714380aedeea12a781754Affected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before b4982fbf13042e3bb33e04eddfea8b1506b5ea65Affected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 03caa9bfb9fde97fb53d33decd7364514e6825cbAffected 9ec7671603573ede31207eb5b0b3e1aa211b2854 to before b4fcd63f6ef79c73cafae8cf4a114def5fc3d80dAffected
LinuxLinux	2.6.31Affected before 2.6.31Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 1d5fe782c0ff068d80933f9cfd0fd39d5434bbc9Affected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 14959fd7538b3be6d7617d9e60e404d6a8d4fd1fAffected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 2b46994a6e76c8cc5556772932b9b60d03a55cd8Affected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before e8bd6c5f5dc2234b4ea714380aedeea12a781754Affected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before b4982fbf13042e3bb33e04eddfea8b1506b5ea65Affected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before 03caa9bfb9fde97fb53d33decd7364514e6825cbAffected
9ec7671603573ede31207eb5b0b3e1aa211b2854 to before b4fcd63f6ef79c73cafae8cf4a114def5fc3d80dAffected

LinuxLinux

2.6.31Affected
before 2.6.31Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.