CVE-2024-56688

Description

In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the xs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request() to dereference the transport->sock that has been set to NULL.

Reserved 2024-12-27 | Published 2024-12-28 | Updated 2025-01-20 | Assigner Linux

Product status

Default status
unaffected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before cc91d59d34ff6a6fee1c0b48612081a451e05e9a
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 86a1f9fa24804cd7f9d7dd3f24af84fc7f8ec02e
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before fe6cbf0b2ac3cf4e21824a44eaa336564ed5e960
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 87a95ee34a48dfad198a2002e4966e1d63d53f2b
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 3811172e8c98ceebd12fe526ca6cb37a1263c964
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 638a8fa5a7e641f9401346c57e236f02379a0c40
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 66d11ca91bf5100ae2e6b5efad97e58d8448843a
affected

7196dbb02ea05835b9ee56910ee82cb55422c7f1 before 4db9ad82a6c823094da27de4825af693a3475d51
affected

Default status
affected

4.11
affected

Any version before 4.11
unaffected

5.4.287
unaffected

5.10.231
unaffected

5.15.174
unaffected

6.1.120
unaffected

6.6.64
unaffected

6.11.11
unaffected

6.12.2
unaffected

6.13
unaffected

References

git.kernel.org/...c/cc91d59d34ff6a6fee1c0b48612081a451e05e9a

git.kernel.org/...c/86a1f9fa24804cd7f9d7dd3f24af84fc7f8ec02e

git.kernel.org/...c/fe6cbf0b2ac3cf4e21824a44eaa336564ed5e960

git.kernel.org/...c/87a95ee34a48dfad198a2002e4966e1d63d53f2b

git.kernel.org/...c/3811172e8c98ceebd12fe526ca6cb37a1263c964

git.kernel.org/...c/638a8fa5a7e641f9401346c57e236f02379a0c40

git.kernel.org/...c/66d11ca91bf5100ae2e6b5efad97e58d8448843a

git.kernel.org/...c/4db9ad82a6c823094da27de4825af693a3475d51

cve.org (CVE-2024-56688)

nvd.nist.gov (CVE-2024-56688)

Download JSON