Security Advisory
CVE-2024-56603
7.8
HIGH
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
net: af_can: do not leave a dangling sk pointer in can_create()
On error can_create() frees the allocated sk object, but sock_init_data()
has already attached it to the provided sock object. This will leave a
dangling sk pointer in the sock object and may cause use-after-free later.
Published Date
December 27, 2024
Official Source
NIST NVD Advisory