Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-56720 Details

Description

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Several fixes to bpf_msg_pop_data, 1. In sk_msg_shift_left, we should put_page 2. if (len == 0), return early is better 3. pop the entire sk_msg (last == msg->sg.size) should be supported 4. Fix for the value of variable "a" 5. In sk_msg_shift_left, after shifting, i has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/275a9f3ef8fabb0cb282a62b9e164dedba7284c5	kernel.org	Patch
https://git.kernel.org/stable/c/5d609ba262475db450ba69b8e8a557bd768ac07a	kernel.org	Patch
https://git.kernel.org/stable/c/785180bed9879680d8e5c5e1b54c8ae8d948f4c8	kernel.org	Patch
https://git.kernel.org/stable/c/98c7ea7d11f2588e8197db042e0291e4ac8f8346	kernel.org	Patch
https://git.kernel.org/stable/c/d26d977633d1d0b8bf9407278189bd0a8d973323	kernel.org	Patch
https://git.kernel.org/stable/c/d3f5763b3062514a234114e97bbde74d8d702449	kernel.org	Patch
https://git.kernel.org/stable/c/e1f54c61c4c9a5244eb8159dce60d248f7d97b32	kernel.org	Patch
https://git.kernel.org/stable/c/f58d3aa457e77a3d9b3df2ab081dcf9950f6029f	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html	CVE
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	CVE

see all 10 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-193	Off-by-one Error	[email protected]
CWE-401	Missing Release of Memory after Effective Lifetime	[email protected]
CWE-401	Missing Release of Memory after Effective Lifetime	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	>= 5.0, < 5.4.287 >= 5.5, < 5.10.231 >= 5.11, < 5.15.174 >= 5.16, < 6.1.120 >= 6.2, < 6.6.64
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Nov 3, 2025	CVE Modified	CVE
Oct 1, 2025	CVE Modified	CISA-ADP
Jan 9, 2025	Initial Analysis	[email protected]
Dec 29, 2024	New CVE Received	kernel.org