CVE-2024-56602
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Feb 11, 2025
CWE ID 416
Summary
CVE-2024-56602 is a newly identified vulnerability in the Linux kernel. In the net: ieee802154 driver, the function ieee802154_create() failed to properly handle errors during socket creation. As a result, a dangling sk (socket) pointer remained in the provided sock object. Subsequent failure of ieee802154_create() would lead to the allocated sk object being freed, leaving a use-after-free condition. To mitigate this issue, the Linux kernel has been updated to clear the sk pointer in the sock object upon error.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.