CVE-2024-56645

can: j1939: j1939_session_new(): fix skb reference counting

State: Published
Severity: 9.8 Critical
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: j1939_session_new(): fix skb reference counting

Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for the initial one in j1939_session_new() to avoid refcount underflow.

[mkl: clean up commit message]

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d71dd0c70099914fcd063135da3c580865e924c to before 224e606a8d8e8c7db94036272c47a37455667313Affected 9d71dd0c70099914fcd063135da3c580865e924c to before b3282c2bebeeb82ceec492ee4972f51ee7a4a132Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 4199dd78a59896e091d3a7a05a77451aa7fd724dAffected 9d71dd0c70099914fcd063135da3c580865e924c to before f117cba69cbbd496babb3defcdf440df4fd6fe14Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 426d94815e12b6bdb9a75af294fbbafb9301601dAffected 9d71dd0c70099914fcd063135da3c580865e924c to before 68fceb143b635cdc59fed3896d5910aff38f345eAffected 9d71dd0c70099914fcd063135da3c580865e924c to before a8c695005bfe6569acd73d777ca298ddddd66105Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

9d71dd0c70099914fcd063135da3c580865e924c to before 224e606a8d8e8c7db94036272c47a37455667313Affected
9d71dd0c70099914fcd063135da3c580865e924c to before b3282c2bebeeb82ceec492ee4972f51ee7a4a132Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 4199dd78a59896e091d3a7a05a77451aa7fd724dAffected
9d71dd0c70099914fcd063135da3c580865e924c to before f117cba69cbbd496babb3defcdf440df4fd6fe14Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 426d94815e12b6bdb9a75af294fbbafb9301601dAffected
9d71dd0c70099914fcd063135da3c580865e924c to before 68fceb143b635cdc59fed3896d5910aff38f345eAffected
9d71dd0c70099914fcd063135da3c580865e924c to before a8c695005bfe6569acd73d777ca298ddddd66105Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.