CVE-2024-56640

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 27, 2024
Updated: Feb 11, 2025
CWE ID 416

Summary

CVE-2024-56640 is a vulnerability affecting the Linux kernel where a LGR/link use-after-free issue was discovered. This issue occurred due to the refcnt of LGR/link reaching 0 prematurely, resulting in unsafe resource access. The issue was caused by repeated releases of the LGR/link refcnt, with a possible culprit being the unprotected call to smc_conn_free() in the server listening path. To mitigate this issue, exclusive sock lock protection has been added to the smc_listen_work() path.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share