CVE-2024-56651
can: hi311x: hi3110_can_ist(): fix potential use-after-free
Severity Score
"-"
*CVSS v-
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In the Linux kernel, the following vulnerability has been resolved:
can: hi311x: hi3110_can_ist(): fix potential use-after-free
The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr
during bus-off") removed the reporting of rxerr and txerr even in case
of correct operation (i. e. not bus-off).
The error count information added to the CAN frame after netif_rx() is
a potential use after free, since there is no guarantee that the skb
is in the same state. It might be freed or reused.
Fix the issue by postponing the netif_rx() call in case of txerr and
rxerr reporting.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-12-27 CVE Reserved
- 2024-12-27 CVE Published
- 2024-12-27 CVE Updated
- 2024-12-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| https://git.kernel.org/stable/c/a22bd630cfff496b270211745536e50e98eb3a45 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/303733fdab728d34708014b3096dc69ebae6e531 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/410054f1cf75378a6f009359e5952a240102a1a2 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/d20bf7e76136fd4c1e47502a1f5773f2290013ed | Vuln. Introduced | |
| https://git.kernel.org/stable/c/22e382d47de09e865a9214cc5c9f99256e65deaa | Vuln. Introduced | |
| https://git.kernel.org/stable/c/dcfcd5fc999b1eb7946de1fd031bc3aaf224c5ae | Vuln. Introduced | |
| https://git.kernel.org/stable/c/330b0ac34beec4fef8b002549af5bc6d0b6f0836 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/f3d865a6b791abbc874739ed702ae64ad2607511 | Vuln. Introduced |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.0 < 6.1.120 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.0 < 6.1.120" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.0 < 6.6.66 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.0 < 6.6.66" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.0 < 6.12.5 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.0 < 6.12.5" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.0 < 6.13-rc2 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.0 < 6.13-rc2" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 4.14.291 Search vendor "Linux" for product "Linux Kernel" and version "4.14.291" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 4.19.256 Search vendor "Linux" for product "Linux Kernel" and version "4.19.256" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.4.211 Search vendor "Linux" for product "Linux Kernel" and version "5.4.211" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.10.137 Search vendor "Linux" for product "Linux Kernel" and version "5.10.137" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.15.61 Search vendor "Linux" for product "Linux Kernel" and version "5.15.61" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.18.18 Search vendor "Linux" for product "Linux Kernel" and version "5.18.18" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.19.2 Search vendor "Linux" for product "Linux Kernel" and version "5.19.2" | en |
Affected
| ||||||