CVE-2024-56664
CVSS 3.1 Score 7 of 10 (high)
Details
Published Dec 27, 2024
Updated: Jan 17, 2025
CWE ID 362
CWE ID 416
Summary
CVE-2024-56664: A race condition vulnerability was found in the Linux kernel's bpf and sockmap subsystem. When an element in a sockmap is replaced with a new socket, the old socket's close() function call may cause the wrong element to be unreferenced, leading to a use-after-free error. This issue has been resolved by preventing sock_map_unref() on potentially replaced elements. The vulnerability resulted in a KASAN memory leak and was allocated and freed by different tasks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.