CVE-2024-56715
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 29, 2024
Updated: Jan 10, 2025
CWE ID 401
Summary
CVE-2024-56715 is a vulnerability affecting the Linux kernel. It is identified as an issue with the ionic driver's netdev notifier registration. Specifically, if the driver fails to register with register_netdev(), it does not properly release the netdev notifier, leading to a memory leak. To address this vulnerability, the affected code now calls ionic_lif_unregister() on register_netdev() failure, and also ionic_lif_unregister_phc() if it has already been registered.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.