CVE-2024-56720

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-56720
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56720.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56720
Downstream
Related
Published
2024-12-29T11:29:58.345Z
Modified
2026-03-20T12:41:00.063091Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
bpf, sockmap: Several fixes to bpf_msg_pop_data
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Several fixes to bpfmsgpop_data

Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if (len == 0), return early is better 3. pop the entire skmsg (last == msg->sg.size) should be supported 4. Fix for the value of variable "a" 5. In skmsgshiftleft, after shifting, i has already pointed to the next element. Addtional skmsgitervar_next may result in BUG.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56720.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7246d8ed4dcce23f7509949a77be15fa9f0e3d28
Fixed
d3f5763b3062514a234114e97bbde74d8d702449
Fixed
d26d977633d1d0b8bf9407278189bd0a8d973323
Fixed
e1f54c61c4c9a5244eb8159dce60d248f7d97b32
Fixed
f58d3aa457e77a3d9b3df2ab081dcf9950f6029f
Fixed
98c7ea7d11f2588e8197db042e0291e4ac8f8346
Fixed
785180bed9879680d8e5c5e1b54c8ae8d948f4c8
Fixed
275a9f3ef8fabb0cb282a62b9e164dedba7284c5
Fixed
5d609ba262475db450ba69b8e8a557bd768ac07a

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56720.json"