In the Linux kernel, the following vulnerability has been resolved:
net: inet: do not leave a dangling sk pointer in inet_create()
sockinitdata() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later.
Clear the sk pointer in the sock object on error.
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2598.0,
"function_hash": "74672383626569615288502843552234703784"
},
"target": {
"file": "net/ipv4/af_inet.c",
"function": "inet_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@691d6d816f93b2a1008c14178399061466e674ef",
"signature_version": "v1",
"id": "CVE-2024-56601-581c3b8b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2450.0,
"function_hash": "4097829082885608416758730528794706605"
},
"target": {
"file": "net/ipv4/af_inet.c",
"function": "inet_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f8a3f255f7509a209292871715cda03779640c8d",
"signature_version": "v1",
"id": "CVE-2024-56601-5f69257b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"1645759656247343819965228770245094554",
"15032172165569420389138842003096578601",
"94196277495474780502580467586212688898",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"156116635674053235241368217718803546492",
"30598990978814734894761210860639258162",
"134799668830152082847293825483294648712",
"226330329984723294893071652960967233658",
"279498248213085552659192648000042459318",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"10604716443879236869646081524051810785",
"332607131942570719375672374514384826173",
"52933841757243123156999793500485122340",
"283437343186612655921934159074136378610",
"96245447294742051462886248290461159717",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"109388128052665260361439665827095668367",
"319006989805338926477200904854121024136",
"22710687377390316962075731360513372629",
"44266046448060408779031208463827506188",
"77662536059547782183222510558689294664",
"238926392122160158886781918090294393900",
"199330612855448883748059810935835623938",
"19559440920715899045884937153355985258"
],
"threshold": 0.9
},
"target": {
"file": "net/ipv4/af_inet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@691d6d816f93b2a1008c14178399061466e674ef",
"signature_version": "v1",
"id": "CVE-2024-56601-9267275b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2582.0,
"function_hash": "114058283925409719988985549131904427854"
},
"target": {
"file": "net/ipv4/af_inet.c",
"function": "inet_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b",
"signature_version": "v1",
"id": "CVE-2024-56601-ae61941d"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"1645759656247343819965228770245094554",
"15032172165569420389138842003096578601",
"94196277495474780502580467586212688898",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"156116635674053235241368217718803546492",
"30598990978814734894761210860639258162",
"134799668830152082847293825483294648712",
"226330329984723294893071652960967233658",
"279498248213085552659192648000042459318",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"10604716443879236869646081524051810785",
"332607131942570719375672374514384826173",
"52933841757243123156999793500485122340",
"283437343186612655921934159074136378610",
"96245447294742051462886248290461159717",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"109388128052665260361439665827095668367",
"319006989805338926477200904854121024136",
"22710687377390316962075731360513372629",
"44266046448060408779031208463827506188",
"77662536059547782183222510558689294664",
"238926392122160158886781918090294393900",
"199330612855448883748059810935835623938",
"19559440920715899045884937153355985258"
],
"threshold": 0.9
},
"target": {
"file": "net/ipv4/af_inet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25447c6aaa7235f155292b0c58a067347e8ae891",
"signature_version": "v1",
"id": "CVE-2024-56601-b9d2c65c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2598.0,
"function_hash": "74672383626569615288502843552234703784"
},
"target": {
"file": "net/ipv4/af_inet.c",
"function": "inet_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25447c6aaa7235f155292b0c58a067347e8ae891",
"signature_version": "v1",
"id": "CVE-2024-56601-c39b23e6"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2500.0,
"function_hash": "66375955509737002347027287852736499039"
},
"target": {
"file": "net/ipv4/af_inet.c",
"function": "inet_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bc34d8c8898ae9fddf4612501aabb22d76c2b2c",
"signature_version": "v1",
"id": "CVE-2024-56601-d00081b0"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"1645759656247343819965228770245094554",
"15032172165569420389138842003096578601",
"94196277495474780502580467586212688898",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"156116635674053235241368217718803546492",
"30598990978814734894761210860639258162",
"134799668830152082847293825483294648712",
"226330329984723294893071652960967233658",
"279498248213085552659192648000042459318",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"10604716443879236869646081524051810785",
"332607131942570719375672374514384826173",
"52933841757243123156999793500485122340",
"283437343186612655921934159074136378610",
"96245447294742051462886248290461159717",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"109388128052665260361439665827095668367",
"319006989805338926477200904854121024136",
"22710687377390316962075731360513372629",
"44266046448060408779031208463827506188",
"77662536059547782183222510558689294664",
"238926392122160158886781918090294393900",
"199330612855448883748059810935835623938",
"19559440920715899045884937153355985258"
],
"threshold": 0.9
},
"target": {
"file": "net/ipv4/af_inet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b",
"signature_version": "v1",
"id": "CVE-2024-56601-d6d3c35b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"1645759656247343819965228770245094554",
"15032172165569420389138842003096578601",
"94196277495474780502580467586212688898",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"156116635674053235241368217718803546492",
"30598990978814734894761210860639258162",
"134799668830152082847293825483294648712",
"226330329984723294893071652960967233658",
"279498248213085552659192648000042459318",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"10604716443879236869646081524051810785",
"332607131942570719375672374514384826173",
"52933841757243123156999793500485122340",
"283437343186612655921934159074136378610",
"96245447294742051462886248290461159717",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"109388128052665260361439665827095668367",
"319006989805338926477200904854121024136",
"22710687377390316962075731360513372629",
"44266046448060408779031208463827506188",
"77662536059547782183222510558689294664",
"238926392122160158886781918090294393900",
"199330612855448883748059810935835623938",
"19559440920715899045884937153355985258"
],
"threshold": 0.9
},
"target": {
"file": "net/ipv4/af_inet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bc34d8c8898ae9fddf4612501aabb22d76c2b2c",
"signature_version": "v1",
"id": "CVE-2024-56601-d9dfc223"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"1645759656247343819965228770245094554",
"15032172165569420389138842003096578601",
"94196277495474780502580467586212688898",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"156116635674053235241368217718803546492",
"30598990978814734894761210860639258162",
"134799668830152082847293825483294648712",
"226330329984723294893071652960967233658",
"279498248213085552659192648000042459318",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"10604716443879236869646081524051810785",
"332607131942570719375672374514384826173",
"52933841757243123156999793500485122340",
"283437343186612655921934159074136378610",
"96245447294742051462886248290461159717",
"16066910106425491170984666037832690155",
"97029996644919869753970377261672592731",
"109388128052665260361439665827095668367",
"319006989805338926477200904854121024136",
"22710687377390316962075731360513372629",
"44266046448060408779031208463827506188",
"77662536059547782183222510558689294664",
"238926392122160158886781918090294393900",
"199330612855448883748059810935835623938",
"19559440920715899045884937153355985258"
],
"threshold": 0.9
},
"target": {
"file": "net/ipv4/af_inet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f8a3f255f7509a209292871715cda03779640c8d",
"signature_version": "v1",
"id": "CVE-2024-56601-f6f1d9e3"
}
]