In the Linux kernel, the following vulnerability has been resolved:
afpacket: avoid erroring out after sockinitdata() in packetcreate()
After sockinitdata() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.
[
{
"signature_type": "Line",
"id": "CVE-2024-56606-0c715b9d",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"322540843819105443862271526263742732079",
"207431157086590762279310039058450569165",
"144170622067624172217265017333469183366",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"289267906121502383359222769364723152447",
"230759546511071231575746420114112971548",
"16924602020469878419408463959795712116",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@157f08db94123e2ba56877dd0ac88908b13a5dd0",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-1ec951c9",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "62518736909818541075485943500904142958",
"length": 1558.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dc1e1db927056cb323296e2294a855cd003dfe7",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-2ad40edf",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "52088484713048112155061227434045141776",
"length": 1528.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cf750b737374454a4e03a5ed449a3eb0c96414",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-2e40224c",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "66254945891626310203639599498295695417",
"length": 1478.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd09880b16d33aa5a7420578e01cd79148fa9829",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-342d072c",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"117019936809922128264288948124592653855",
"82941394806067236994982987865990928167",
"33434934934969625733508908344596273790",
"284531499081053138680627868091312082544",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"42246469373210584576288821365331882011",
"77092602489573216633260718911932172749",
"48341710833894677466820805484814705593",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71b22837a5e55ac27d6a14b9cdf2326587405c4f",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-3e821bed",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"322540843819105443862271526263742732079",
"207431157086590762279310039058450569165",
"144170622067624172217265017333469183366",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"289267906121502383359222769364723152447",
"230759546511071231575746420114112971548",
"16924602020469878419408463959795712116",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd09880b16d33aa5a7420578e01cd79148fa9829",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-40b40fc8",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"117019936809922128264288948124592653855",
"82941394806067236994982987865990928167",
"33434934934969625733508908344596273790",
"284531499081053138680627868091312082544",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"42246469373210584576288821365331882011",
"77092602489573216633260718911932172749",
"48341710833894677466820805484814705593",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dc1e1db927056cb323296e2294a855cd003dfe7",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-51de8f2e",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "66254945891626310203639599498295695417",
"length": 1478.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@157f08db94123e2ba56877dd0ac88908b13a5dd0",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-a25399d4",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"322540843819105443862271526263742732079",
"207431157086590762279310039058450569165",
"144170622067624172217265017333469183366",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"289267906121502383359222769364723152447",
"230759546511071231575746420114112971548",
"16924602020469878419408463959795712116",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46f2a11cb82b657fd15bab1c47821b635e03838b",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-d098273d",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"117019936809922128264288948124592653855",
"82941394806067236994982987865990928167",
"33434934934969625733508908344596273790",
"284531499081053138680627868091312082544",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"42246469373210584576288821365331882011",
"230759546511071231575746420114112971548",
"16924602020469878419408463959795712116",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@132e615bb1d7cdec2d3cfbdec2efa630e923fd21",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-e21815c9",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "66254945891626310203639599498295695417",
"length": 1478.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46f2a11cb82b657fd15bab1c47821b635e03838b",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-ec97a233",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "52088484713048112155061227434045141776",
"length": 1528.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@132e615bb1d7cdec2d3cfbdec2efa630e923fd21",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2024-56606-fd4ccd2b",
"target": {
"file": "net/packet/af_packet.c"
},
"digest": {
"line_hashes": [
"292849997046763562317829374568983283958",
"37302501904436167337272804619727684493",
"104966272351939720474222207631189053887",
"93274284762130616321459797790583407776",
"218928430514812960192963735694179069803",
"117019936809922128264288948124592653855",
"82941394806067236994982987865990928167",
"33434934934969625733508908344596273790",
"284531499081053138680627868091312082544",
"116433505502041179026879775978260418791",
"295391501572275068482995739440454764310",
"42246469373210584576288821365331882011",
"230759546511071231575746420114112971548",
"16924602020469878419408463959795712116",
"148508212316805895092553577792684558065",
"250427390364975431411468513083286276595"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cf750b737374454a4e03a5ed449a3eb0c96414",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2024-56606-ffd0488d",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_create"
},
"digest": {
"function_hash": "62518736909818541075485943500904142958",
"length": 1558.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71b22837a5e55ac27d6a14b9cdf2326587405c4f",
"deprecated": false
}
]