Lucene search
K

28 matches found

OSV
OSV
added 2026/05/27 12:0 a.m.3 views

UBUNTU-CVE-2026-45966

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unixneedsrevalidation When receiving file descriptors via SCMRIGHTS, both the socket pointer and the socket's sk pointer can be NULL during socket setup or teardown, causing NULL pointer...

5.7AI score0.00022EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.3 views

Siemens SIMATIC S7-1500 Use After Free (CVE-2024-56601)

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inetcreate sockinitdata attaches the allocated sk object to the provided sock object. If inetcreate fails later, the sk object is freed, but the sock object retains the dangling...

7.8CVSS6.5AI score0.00011EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.1 views

kernel: net: inet: do not leave a dangling sk pointer in inet_create()

In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inetcreate sockinitdata attaches the allocated sk object to the provided sock object. If inetcreate fails later, the sk object is freed, but the sock object retains the dangling...

7.8CVSS6.8AI score0.00011EPSS
Exploits0References5
OSV
OSV
added 2025/04/15 9:4 a.m.7 views

SUSE-SU-2025:1276-1 Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005580 fixes one issue. The following security issue was fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6create bsc1235218...

7.8CVSS7.2AI score0.00011EPSS
Exploits0References3
NVD
NVD
added 2024/12/27 3:15 p.m.8 views

CVE-2024-56600

In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6create sockinitdata attaches the allocated sk pointer to the provided sock object. If inet6create fails later, the sk object is released, but the sock object retains the...

7.8CVSS0.00011EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2024/12/27 2:51 p.m.14 views

CVE-2024-56600 net: inet6: do not leave a dangling sk pointer in inet6_create()

In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6create sockinitdata attaches the allocated sk pointer to the provided sock object. If inet6create fails later, the sk object is released, but the sock object retains the...

7.3AI score0.00011EPSS
Exploits0References7
CVE
CVE
added 2024/12/27 2:51 p.m.196 views

CVE-2024-56600

CVE-2024-56600 (Linux kernel) : The issue arises in inet6_create() where sock_init_data() attaches an allocated sk to the sock, and if inet6_create() later fails, the sock keeps a dangling sk pointer, risking use-after-free. The fix, as described, is to clear the sock’s sk pointer on error to pre...

7.8CVSS6.4AI score0.00011EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2024/12/27 2:51 p.m.7 views

CVE-2024-56600 net: inet6: do not leave a dangling sk pointer in inet6_create()

In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6create sockinitdata attaches the allocated sk pointer to the provided sock object. If inet6create fails later, the sk object is released, but the sock object retains the...

7.8CVSS6AI score0.00011EPSS
Exploits0References12
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inet6create in the net:afcan module not clearing the dangling sk pointer, which could lead to reuse after...

5.5CVSS6.5AI score0.0002EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.12 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50186)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50186 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, wh...

7.8CVSS6.2AI score0.00013EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2024/12/06 1:4 p.m.1 views

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...

7.8CVSS8.6AI score0.0072EPSS
Exploits1References80
RedhatCVE
RedhatCVE
added 2024/11/21 7:27 p.m.23 views

CVE-2024-50293

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in smccreate Thanks to commit 4bbd360a5084 "socket: Print pf-create when it does not clear sock-sk on failure.", syzbot found an issue with AFSMC: smccreate must clear sock-sk on failur...

7.8CVSS6.7AI score0.00057EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2024/11/21 7:13 p.m.14 views

CVE-2024-50186

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf-create fails We have recently noticed the exact same KASAN splat as in commit 6cd4a78d962b "net: do not leave a dangling sk pointer, when socket creation fails". The problem is that...

6.7CVSS6.6AI score0.00013EPSS
Exploits0References4
NVD
NVD
added 2024/11/19 2:16 a.m.17 views

CVE-2024-50293

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in smccreate Thanks to commit 4bbd360a5084 "socket: Print pf-create when it does not clear sock-sk on failure.", syzbot found an issue with AFSMC: smccreate must clear sock-sk on failur...

7.8CVSS0.00057EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/11/19 1:30 a.m.16 views

CVE-2024-50293

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in smccreate Thanks to commit 4bbd360a5084 "socket: Print pf-create when it does not clear sock-sk on failure.", syzbot found an issue with AFSMC: smccreate must clear sock-sk on failur...

7.8CVSS6.2AI score0.00057EPSS
Exploits0
OSV
OSV
added 2024/11/19 1:30 a.m.16 views

CVE-2024-50293 net/smc: do not leave a dangling sk pointer in __smc_create()

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in smccreate Thanks to commit 4bbd360a5084 "socket: Print pf-create when it does not clear sock-sk on failure.", syzbot found an issue with AFSMC: smccreate must clear sock-sk on failur...

7.8CVSS6.9AI score0.00057EPSS
Exploits0References5
NVD
NVD
added 2024/11/08 6:15 a.m.16 views

CVE-2024-50186

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf-create fails We have recently noticed the exact same KASAN splat as in commit 6cd4a78d962b "net: do not leave a dangling sk pointer, when socket creation fails". The problem is that...

7.8CVSS0.00013EPSS
Exploits0References6
CVE
CVE
added 2024/11/08 5:38 a.m.155 views

CVE-2024-50186

CVE-2024-50186 : Linux kernel vulnerability in net: explicitly clear the sk pointer when pf->create fails. Root cause: some pf->create implementations do not NULL the freed sk object in error paths, leaving a dangling pointer and enabling Use-After-Free. Fix: explicitly NULL the sk pointer ...

7.8CVSS6.4AI score0.00013EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/08 5:38 a.m.1 views

CVE-2024-50186 net: explicitly clear the sk pointer, when pf->create fails

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf-create fails We have recently noticed the exact same KASAN splat as in commit 6cd4a78d962b "net: do not leave a dangling sk pointer, when socket creation fails". The problem is that...

7.6AI score0.00013EPSS
Exploits0References5
OSV
OSV
added 2024/11/08 5:38 a.m.14 views

CVE-2024-50186 net: explicitly clear the sk pointer, when pf->create fails

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf-create fails We have recently noticed the exact same KASAN splat as in commit 6cd4a78d962b "net: do not leave a dangling sk pointer, when socket creation fails". The problem is that...

7.8CVSS6.1AI score0.00013EPSS
Exploits0References9
Rows per page
Query Builder