CVE-2024-56661

Summary

CVE-2024-56661 is a vulnerability in the Linux kernel that affects the tipc subsystem. The issue involves a NULL dereference in the cleanup_bearer function, which can lead to a kernel panic and potentially allow an attacker to gain unauthorized access. The cause of the issue is that the tipc_net pointer is not correctly initialized, leading to a NULL value when attempting to decrement a queue count. The vulnerability was discovered by syzbot, and exploitation could result in a denial-of-service or potentially more serious consequences. The vulnerability has been resolved by caching the tipc_net pointer to prevent the NULL dereference.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.