CVE-2024-56602

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-56602
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56602.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56602
Downstream
Related
Published
2024-12-27T14:51:08.174Z
Modified
2026-05-28T03:53:29.584156408Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

sockinitdata() attaches the allocated sk object to the provided sock object. If ieee802154_create() fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow use-after-free.

Clear the sk pointer in the sock object on error.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56602.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9ec7671603573ede31207eb5b0b3e1aa211b2854
Fixed
1d5fe782c0ff068d80933f9cfd0fd39d5434bbc9
Fixed
14959fd7538b3be6d7617d9e60e404d6a8d4fd1f
Fixed
2b46994a6e76c8cc5556772932b9b60d03a55cd8
Fixed
e8bd6c5f5dc2234b4ea714380aedeea12a781754
Fixed
b4982fbf13042e3bb33e04eddfea8b1506b5ea65
Fixed
03caa9bfb9fde97fb53d33decd7364514e6825cb
Fixed
b4fcd63f6ef79c73cafae8cf4a114def5fc3d80d

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56602.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.31
Fixed
5.4.287
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.231
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.174
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.120
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.66
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56602.json"