CVE-2024-56645

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56645
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for the initial one in j1939_session_new() to avoid refcount underflow. [mkl: clean up commit message]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/224e606a8d8e8c7db94036272c47a37455667313 Patch
https://git.kernel.org/stable/c/4199dd78a59896e091d3a7a05a77451aa7fd724d Patch
https://git.kernel.org/stable/c/426d94815e12b6bdb9a75af294fbbafb9301601d Patch
https://git.kernel.org/stable/c/68fceb143b635cdc59fed3896d5910aff38f345e Patch
https://git.kernel.org/stable/c/a8c695005bfe6569acd73d777ca298ddddd66105 Patch
https://git.kernel.org/stable/c/b3282c2bebeeb82ceec492ee4972f51ee7a4a132 Patch
https://git.kernel.org/stable/c/f117cba69cbbd496babb3defcdf440df4fd6fe14 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
History

26 Sep 2025, 16:49

Type Values Removed Values Added
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: j1939: j1939_session_new(): corrige el conteo de referencias de skb Dado que j1939_session_skb_queue() realiza un skb_get() adicional para cada nuevo skb, haga lo mismo para el inicial en j1939_session_new() para evitar el desbordamiento del conteo de referencias. [mkl: limpia el mensaje de confirmación]
References () https://git.kernel.org/stable/c/224e606a8d8e8c7db94036272c47a37455667313 - () https://git.kernel.org/stable/c/224e606a8d8e8c7db94036272c47a37455667313 - Patch
References () https://git.kernel.org/stable/c/4199dd78a59896e091d3a7a05a77451aa7fd724d - () https://git.kernel.org/stable/c/4199dd78a59896e091d3a7a05a77451aa7fd724d - Patch
References () https://git.kernel.org/stable/c/426d94815e12b6bdb9a75af294fbbafb9301601d - () https://git.kernel.org/stable/c/426d94815e12b6bdb9a75af294fbbafb9301601d - Patch
References () https://git.kernel.org/stable/c/68fceb143b635cdc59fed3896d5910aff38f345e - () https://git.kernel.org/stable/c/68fceb143b635cdc59fed3896d5910aff38f345e - Patch
References () https://git.kernel.org/stable/c/a8c695005bfe6569acd73d777ca298ddddd66105 - () https://git.kernel.org/stable/c/a8c695005bfe6569acd73d777ca298ddddd66105 - Patch
References () https://git.kernel.org/stable/c/b3282c2bebeeb82ceec492ee4972f51ee7a4a132 - () https://git.kernel.org/stable/c/b3282c2bebeeb82ceec492ee4972f51ee7a4a132 - Patch
References () https://git.kernel.org/stable/c/f117cba69cbbd496babb3defcdf440df4fd6fe14 - () https://git.kernel.org/stable/c/f117cba69cbbd496babb3defcdf440df4fd6fe14 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-09-26 16:49

NVD link : CVE-2024-56645

Mitre link : CVE-2024-56645

CVE.ORG link : CVE-2024-56645

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other