CVE-2024-56605
Published: Dec 27, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_sock_alloc() allocates the sk object and attaches it to the provided sock object. On error l2cap_sock_alloc() frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-free in other code.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 49dfbb9129c4edb318578de35cc45c555df37884 - < f6ad641646b67f29c7578dcd6c25813c7dcbf51eaffected 49dfbb9129c4edb318578de35cc45c555df37884 - < daa13175a6dea312a76099066cb4cbd4fc959a84affected 49dfbb9129c4edb318578de35cc45c555df37884 - < a8677028dd5123e5e525b8195483994d87123de4affected 49dfbb9129c4edb318578de35cc45c555df37884 - < bb2f2342a6ddf7c04f9aefbbfe86104cd138e629affected 49dfbb9129c4edb318578de35cc45c555df37884 - < 8ad09ddc63ace3950ac43db6fbfe25b40f589dd6+2 more versions |
Linux | Linux | affected 3.6unaffected 0 - < 3.6unaffected 5.4.287 - <= 5.4.*unaffected 5.10.231 - <= 5.10.*unaffected 5.15.174 - <= 5.15.*+4 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now