CVE-2024-56603

net: af_can: do not leave a dangling sk pointer in can_create()

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: af_can: do not leave a dangling sk pointer in can_create()

On error can_create() frees the allocated sk object, but sock_init_data() has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 884ae8bcee749be43a071d6ed2d89058dbd2425cAffected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before ce39b5576785bb3e66591145aad03d66bc3e778dAffected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 1fe625f12d090d69f3f084990c7e4c1ff94bfe5fAffected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 5947c9ac08f0771ea8ed64186b0d52e9029cb6c0Affected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before db207d19adbac96058685f6257720906ad41d215Affected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 8df832e6b945e1ba61467d7f1c9305e314ae92feAffected 0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 811a7ca7320c062e15d0f5b171fe6ad8592d1434Affected
LinuxLinux	2.6.25Affected before 2.6.25Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 884ae8bcee749be43a071d6ed2d89058dbd2425cAffected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before ce39b5576785bb3e66591145aad03d66bc3e778dAffected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 1fe625f12d090d69f3f084990c7e4c1ff94bfe5fAffected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 5947c9ac08f0771ea8ed64186b0d52e9029cb6c0Affected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before db207d19adbac96058685f6257720906ad41d215Affected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 8df832e6b945e1ba61467d7f1c9305e314ae92feAffected
0d66548a10cbbe0ef256852d63d30603f0f73f9b to before 811a7ca7320c062e15d0f5b171fe6ad8592d1434Affected

LinuxLinux

2.6.25Affected
before 2.6.25Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.