CVE-2024-56606

af_packet: avoid erroring out after sock_init_data() in packet_create()

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Oct 15, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

af_packet: avoid erroring out after sock_init_data() in packet_create()

After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	b013840810c221f2b0cf641d01531526052dc1fb to before 71b22837a5e55ac27d6a14b9cdf2326587405c4fAffected b013840810c221f2b0cf641d01531526052dc1fb to before 1dc1e1db927056cb323296e2294a855cd003dfe7Affected b013840810c221f2b0cf641d01531526052dc1fb to before 132e615bb1d7cdec2d3cfbdec2efa630e923fd21Affected b013840810c221f2b0cf641d01531526052dc1fb to before a6cf750b737374454a4e03a5ed449a3eb0c96414Affected b013840810c221f2b0cf641d01531526052dc1fb to before 157f08db94123e2ba56877dd0ac88908b13a5dd0Affected b013840810c221f2b0cf641d01531526052dc1fb to before fd09880b16d33aa5a7420578e01cd79148fa9829Affected b013840810c221f2b0cf641d01531526052dc1fb to before 46f2a11cb82b657fd15bab1c47821b635e03838bAffected
LinuxLinux	3.14Affected before 3.14Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

b013840810c221f2b0cf641d01531526052dc1fb to before 71b22837a5e55ac27d6a14b9cdf2326587405c4fAffected
b013840810c221f2b0cf641d01531526052dc1fb to before 1dc1e1db927056cb323296e2294a855cd003dfe7Affected
b013840810c221f2b0cf641d01531526052dc1fb to before 132e615bb1d7cdec2d3cfbdec2efa630e923fd21Affected
b013840810c221f2b0cf641d01531526052dc1fb to before a6cf750b737374454a4e03a5ed449a3eb0c96414Affected
b013840810c221f2b0cf641d01531526052dc1fb to before 157f08db94123e2ba56877dd0ac88908b13a5dd0Affected
b013840810c221f2b0cf641d01531526052dc1fb to before fd09880b16d33aa5a7420578e01cd79148fa9829Affected
b013840810c221f2b0cf641d01531526052dc1fb to before 46f2a11cb82b657fd15bab1c47821b635e03838bAffected

LinuxLinux

3.14Affected
before 3.14Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.