CVE-2024-56720

bpf, sockmap: Several fixes to bpf_msg_pop_data

State: Published
Severity: 7.8 High
Published: Dec 29, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Several fixes to bpf_msg_pop_data

Several fixes to bpf_msg_pop_data, 1. In sk_msg_shift_left, we should put_page 2. if (len == 0), return early is better 3. pop the entire sk_msg (last == msg->sg.size) should be supported 4. Fix for the value of variable "a" 5. In sk_msg_shift_left, after shifting, i has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before d3f5763b3062514a234114e97bbde74d8d702449Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before d26d977633d1d0b8bf9407278189bd0a8d973323Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before e1f54c61c4c9a5244eb8159dce60d248f7d97b32Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before f58d3aa457e77a3d9b3df2ab081dcf9950f6029fAffected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 98c7ea7d11f2588e8197db042e0291e4ac8f8346Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 785180bed9879680d8e5c5e1b54c8ae8d948f4c8Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 275a9f3ef8fabb0cb282a62b9e164dedba7284c5Affected 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 5d609ba262475db450ba69b8e8a557bd768ac07aAffected
LinuxLinux	5.0Affected before 5.0Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before d3f5763b3062514a234114e97bbde74d8d702449Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before d26d977633d1d0b8bf9407278189bd0a8d973323Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before e1f54c61c4c9a5244eb8159dce60d248f7d97b32Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before f58d3aa457e77a3d9b3df2ab081dcf9950f6029fAffected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 98c7ea7d11f2588e8197db042e0291e4ac8f8346Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 785180bed9879680d8e5c5e1b54c8ae8d948f4c8Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 275a9f3ef8fabb0cb282a62b9e164dedba7284c5Affected
7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 5d609ba262475db450ba69b8e8a557bd768ac07aAffected

LinuxLinux

5.0Affected
before 5.0Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.