In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939sessionnew(): fix skb reference counting
Since j1939sessionskbqueue() does an extra skbget() for each new skb, do the same for the initial one in j1939sessionnew() to avoid refcount underflow.
[mkl: clean up commit message]
[
{
"id": "CVE-2024-56645-14c74838",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426d94815e12b6bdb9a75af294fbbafb9301601d"
},
{
"id": "CVE-2024-56645-181286e6",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f117cba69cbbd496babb3defcdf440df4fd6fe14"
},
{
"id": "CVE-2024-56645-181931d6",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3282c2bebeeb82ceec492ee4972f51ee7a4a132"
},
{
"id": "CVE-2024-56645-27734520",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f117cba69cbbd496babb3defcdf440df4fd6fe14"
},
{
"id": "CVE-2024-56645-45e1f9c0",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68fceb143b635cdc59fed3896d5910aff38f345e"
},
{
"id": "CVE-2024-56645-65d066f8",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68fceb143b635cdc59fed3896d5910aff38f345e"
},
{
"id": "CVE-2024-56645-6c597d33",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426d94815e12b6bdb9a75af294fbbafb9301601d"
},
{
"id": "CVE-2024-56645-94eea91e",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4199dd78a59896e091d3a7a05a77451aa7fd724d"
},
{
"id": "CVE-2024-56645-a3bfa269",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8c695005bfe6569acd73d777ca298ddddd66105"
},
{
"id": "CVE-2024-56645-ad59baa8",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4199dd78a59896e091d3a7a05a77451aa7fd724d"
},
{
"id": "CVE-2024-56645-d4276f49",
"target": {
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"223522525009932817914179985783261558928",
"300835443805608055233909388321517954348",
"102872543591965087156975340781944950093",
"78978593386990491270817837301606625666"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8c695005bfe6569acd73d777ca298ddddd66105"
},
{
"id": "CVE-2024-56645-e70dcf22",
"target": {
"function": "j1939_session_new",
"file": "net/can/j1939/transport.c"
},
"signature_version": "v1",
"digest": {
"length": 959.0,
"function_hash": "56696064885741974033207575579407147452"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3282c2bebeeb82ceec492ee4972f51ee7a4a132"
}
]