CVE-2024-56688

sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport

State: Published
Severity: 7.5 High
Published: Dec 28, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport

Since transport->sock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the xs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request() to dereference the transport->sock that has been set to NULL.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before cc91d59d34ff6a6fee1c0b48612081a451e05e9aAffected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 86a1f9fa24804cd7f9d7dd3f24af84fc7f8ec02eAffected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before fe6cbf0b2ac3cf4e21824a44eaa336564ed5e960Affected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 87a95ee34a48dfad198a2002e4966e1d63d53f2bAffected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 3811172e8c98ceebd12fe526ca6cb37a1263c964Affected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 638a8fa5a7e641f9401346c57e236f02379a0c40Affected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 66d11ca91bf5100ae2e6b5efad97e58d8448843aAffected 7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 4db9ad82a6c823094da27de4825af693a3475d51Affected
LinuxLinux	4.11Affected before 4.11Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before cc91d59d34ff6a6fee1c0b48612081a451e05e9aAffected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 86a1f9fa24804cd7f9d7dd3f24af84fc7f8ec02eAffected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before fe6cbf0b2ac3cf4e21824a44eaa336564ed5e960Affected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 87a95ee34a48dfad198a2002e4966e1d63d53f2bAffected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 3811172e8c98ceebd12fe526ca6cb37a1263c964Affected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 638a8fa5a7e641f9401346c57e236f02379a0c40Affected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 66d11ca91bf5100ae2e6b5efad97e58d8448843aAffected
7196dbb02ea05835b9ee56910ee82cb55422c7f1 to before 4db9ad82a6c823094da27de4825af693a3475d51Affected

LinuxLinux

4.11Affected
before 4.11Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.