CVE-2024-56688

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-56688
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-56688.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-56688
Downstream
Related
Published
2024-12-28T09:46:14Z
Modified
2026-08-12T03:51:10Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
Details

In the Linux kernel, the following vulnerability has been resolved:

sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport

Since transport->sock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the xs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request() to dereference the transport->sock that has been set to NULL.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56688.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7196dbb02ea05835b9ee56910ee82cb55422c7f1
Fixed
cc91d59d34ff6a6fee1c0b48612081a451e05e9a
Fixed
86a1f9fa24804cd7f9d7dd3f24af84fc7f8ec02e
Fixed
fe6cbf0b2ac3cf4e21824a44eaa336564ed5e960
Fixed
87a95ee34a48dfad198a2002e4966e1d63d53f2b
Fixed
3811172e8c98ceebd12fe526ca6cb37a1263c964
Fixed
638a8fa5a7e641f9401346c57e236f02379a0c40
Fixed
66d11ca91bf5100ae2e6b5efad97e58d8448843a
Fixed
4db9ad82a6c823094da27de4825af693a3475d51

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-56688.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.11.0
Fixed
5.4.287
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.231
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.174
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.120
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.11
Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-56688.json"