Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-56601 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/25447c6aaa7235f155292b0c58a067347e8ae891	kernel.org	Patch
https://git.kernel.org/stable/c/2bc34d8c8898ae9fddf4612501aabb22d76c2b2c	kernel.org	Patch
https://git.kernel.org/stable/c/3e8258070b0f2aba66b3ef18883de229674fb288	kernel.org	Patch
https://git.kernel.org/stable/c/691d6d816f93b2a1008c14178399061466e674ef	kernel.org	Patch
https://git.kernel.org/stable/c/9365fa510c6f82e3aa550a09d0c5c6b44dbc78ff	kernel.org	Patch
https://git.kernel.org/stable/c/b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b	kernel.org	Patch
https://git.kernel.org/stable/c/f8a3f255f7509a209292871715cda03779640c8d	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html	CVE
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	CVE

see all 9 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-416	Use After Free	[email protected]
CWE-416	Use After Free	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	< 5.4.287 >= 5.5, < 5.10.231 >= 5.11, < 5.15.174 >= 5.16, < 6.1.120 >= 6.2, < 6.6.66
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 3, 2025	CVE Modified	CVE
Feb 11, 2025	CVE Modified	CISA-ADP
Jan 14, 2025	Initial Analysis	[email protected]
Dec 27, 2024	New CVE Received	kernel.org