In the Linux kernel, the following vulnerability has been resolved:
net: afcan: do not leave a dangling sk pointer in cancreate()
On error cancreate() frees the allocated sk object, but sockinit_data() has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later.
[
{
"id": "CVE-2024-56603-5ae0b3a9",
"signature_version": "v1",
"digest": {
"length": 949.0,
"function_hash": "46023587977187444410913386034535706599"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce39b5576785bb3e66591145aad03d66bc3e778d",
"target": {
"file": "net/can/af_can.c",
"function": "can_create"
}
},
{
"id": "CVE-2024-56603-90af9a9d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251056779423208157459849946466908723031",
"25495968526623305108725163301544559282",
"19961425049392367704969032234901359923",
"52100750775827461117220550684277458563"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@884ae8bcee749be43a071d6ed2d89058dbd2425c",
"target": {
"file": "net/can/af_can.c"
}
},
{
"id": "CVE-2024-56603-c6e37bd5",
"signature_version": "v1",
"digest": {
"length": 949.0,
"function_hash": "46023587977187444410913386034535706599"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@884ae8bcee749be43a071d6ed2d89058dbd2425c",
"target": {
"file": "net/can/af_can.c",
"function": "can_create"
}
},
{
"id": "CVE-2024-56603-cb689b03",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251056779423208157459849946466908723031",
"25495968526623305108725163301544559282",
"19961425049392367704969032234901359923",
"52100750775827461117220550684277458563"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce39b5576785bb3e66591145aad03d66bc3e778d",
"target": {
"file": "net/can/af_can.c"
}
}
]