Skip to content
fr Sign in
7.8 High

CVE-2024-56601 In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in…

Description

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.

Affected products and versions

Product Affected versions Fixed in
Linux 6.13 earliest → < 6.13 6.13
Linux 6.12 earliest → < 6.12.5 6.12.5
Linux 6.6 earliest → < 6.6.66 6.6.66
Linux 6.1 earliest → < 6.1.120 6.1.120
Linux 5.15 earliest → < 5.15.174 5.15.174
Linux 5.10 earliest → < 5.10.231 5.10.231
Linux 5.4 earliest → < 5.4.287 5.4.287
Linux 2.6.12 No fix stated
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
Show the 5 other branches
Product Affected versions Fixed in
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
RUGGEDCOM RST2428P 3.2 earliest → < 3.2 3.2
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.2 earliest → < 3.2 3.2
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.2 earliest → < 3.2 3.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux

The 18283 CVEs of Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated
Track this CVE