CVE-2024-56658

Summary

CVE-2024-56658 is a slab-use-after-free vulnerability in the Linux kernel. Ilya discovered an issue in xfrm6_net_init() and xfrm4_net_init(), where the net structure might be freed before all the dst callbacks are called. This results in dst->ops pointing to the old net->xfrm.xfrm[46]_dst_ops, which has already been freed when dst_destroy() is called later. A fix for this issue was introduced in ac888d58869b, which queues the 'struct net' to be freed after one cleanup_net() round. The vulnerability was detected by KASAN and caused a slab-use-after-free error.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.