cve/2024/CVE-2024-56603.md

CVE-2024-56603

Description

In the Linux kernel, the following vulnerability has been resolved:net: af_can: do not leave a dangling sk pointer in can_create()On error can_create() frees the allocated sk object, but sock_init_data()has already attached it to the provided sock object. This will leave adangling sk pointer in the sock object and may cause use-after-free later.

POC

Reference

No PoCs from references.

Github

• https://github.com/cku-heise/euvd-api-doc