CVE-2024-56720

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-56720
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56720.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56720
Downstream
Related
Published
2024-12-29T11:29:58Z
Modified
2026-08-12T03:30:30Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
bpf, sockmap: Several fixes to bpf_msg_pop_data
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Several fixes to bpf_msg_pop_data

Several fixes to bpf_msg_pop_data,

  1. In sk_msg_shift_left, we should put_page
  2. if (len == 0), return early is better
  3. pop the entire sk_msg (last == msg->sg.size) should be supported
  4. Fix for the value of variable "a"
  5. In sk_msg_shift_left, after shifting, i has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.
Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56720.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7246d8ed4dcce23f7509949a77be15fa9f0e3d28
Fixed
d3f5763b3062514a234114e97bbde74d8d702449
Fixed
d26d977633d1d0b8bf9407278189bd0a8d973323
Fixed
e1f54c61c4c9a5244eb8159dce60d248f7d97b32
Fixed
f58d3aa457e77a3d9b3df2ab081dcf9950f6029f
Fixed
98c7ea7d11f2588e8197db042e0291e4ac8f8346
Fixed
785180bed9879680d8e5c5e1b54c8ae8d948f4c8
Fixed
275a9f3ef8fabb0cb282a62b9e164dedba7284c5
Fixed
5d609ba262475db450ba69b8e8a557bd768ac07a

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56720.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0.0
Fixed
5.4.287
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.231
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.174
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.120
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.11
Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56720.json"