imPC@ndo IT

Tracker / CVE-2024-56688

CVE-2024-56688

High 7.5

In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the xs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request() to dereference the transport->sock that has been set to NULL.

Affected products and versions

linux linux_kernel · 4.11 → 5.4.287
linux linux_kernel · 5.11 → 5.15.174
linux linux_kernel · 5.16 → 6.1.120
linux linux_kernel · 5.5 → 5.10.231
linux linux_kernel · 6.12 → 6.12.2
linux linux_kernel · 6.2 → 6.6.64
linux linux_kernel · 6.7 → 6.11.11

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References