CVE-2024-56605
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Feb 11, 2025
CWE ID 416
Summary
CVE-2024-56605 is a vulnerability affecting the Linux kernel's Bluetooth L2CAP (Logical Link Control and Adaptation Protocol) subsystem. The issue lies in the function l2cap_sock_create(), where an error is not properly handled during the allocation of an sk (socket) object. While the sk object is freed, the dangling pointer remains attached to the sock object, which can result in use-after-free conditions. Other parts of the code may then attempt to use this freed memory, potentially leading to unintended behavior or system crashes.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.