CVE-2024-56651

HIGH EPSS 13.5%
Published Dec 27, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Dec 27, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct operation (i. e. not bus-off). The error count information added to the CAN frame after netif_rx() is a potential use after free, since there is no guarantee that the skb is in the same state. It might be freed or reused. Fix the issue by postponing the netif_rx() call in case of txerr and rxerr reporting.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
13.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥4.14.291  –  <4.15
linuxlinux_kernel*≥4.19.256  –  <4.20
linuxlinux_kernel*≥5.4.211  –  <5.5
linuxlinux_kernel*≥5.10.137  –  <5.11
linuxlinux_kernel*≥5.15.61  –  <5.16
linuxlinux_kernel*≥5.18.18  –  <5.19
linuxlinux_kernel*≥5.19.2  –  <5.20
linuxlinux_kernel*≥6.0  –  <6.1.120
linuxlinux_kernel*≥6.2  –  <6.6.66
linuxlinux_kernel*≥6.7  –  <6.12.5
linuxlinux_kernel6.13any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/1128022009444faf49359bd406cd665b177cb643
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4ad77eb8f2e07bcfa0e28887d3c7dbb732d92cc1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9ad86d377ef4a19c75a9c639964879a5b25a433b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc30b2fe8c54694f8ae08a5b8a5d174d16d93075
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1128022009444faf49359bd406cd665b177cb643
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4ad77eb8f2e07bcfa0e28887d3c7dbb732d92cc1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9ad86d377ef4a19c75a9c639964879a5b25a433b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc30b2fe8c54694f8ae08a5b8a5d174d16d93075
    Patch