CVE-2024-56606
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Feb 11, 2025
CWE ID 416
Summary
CVE-2024-56606 is a newly identified vulnerability affecting the Linux kernel. In the net/ipv4/af_packet.c file, an issue was discovered where, after the call to sock_init_data() in packet_create(), the sk object is freed, leaving a dangling pointer in the sock object. This could potentially lead to use-after-free vulnerabilities in other parts of the code that attempt to use the now-freed sk pointer. The vulnerability has been addressed in a recent Linux kernel update.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.