CVE-2024-56720

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Several fixes to bpf_msg_pop_data

Several fixes to bpf_msg_pop_data, 1. In sk_msg_shift_left, we should put_page 2. if (len == 0), return early is better 3. pop the entire sk_msg (last == msg->sg.size) should be supported 4. Fix for the value of variable "a" 5. In sk_msg_shift_left, after shifting, i has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-193CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < d3f5763b3062514a234114e97bbde74d8d702449; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < d26d977633d1d0b8bf9407278189bd0a8d973323; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < e1f54c61c4c9a5244eb8159dce60d248f7d97b32; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < f58d3aa457e77a3d9b3df2ab081dcf9950f6029f; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < 98c7ea7d11f2588e8197db042e0291e4ac8f8346; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < 785180bed9879680d8e5c5e1b54c8ae8d948f4c8; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < 275a9f3ef8fabb0cb282a62b9e164dedba7284c5; >= 7246d8ed4dcce23f7509949a77be15fa9f0e3d28, < 5d609ba262475db450ba69b8e8a557bd768ac07a
LinuxLinux5.0

References

Timeline

Published
Dec 29, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-567217.1In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_13CVE-2024-567225.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset,CVE-2024-567235.5In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While desigCVE-2024-567245.5In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device While design CVE-2024-567255.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c Add erroCVE-2024-567265.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error poiCVE-2024-567275.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c Adding eCVE-2024-567285.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c Add erCVE-2024-567294.7In the Linux kernel, the following vulnerability has been resolved: smb: Initialize cfid->tcon before performing network ops Avoid leakingCVE-2024-56736.1Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir paramCVE-2024-567305.5In the Linux kernel, the following vulnerability has been resolved: net/9p/usbg: fix handling of the failed kzalloc() memory allocation OnCVE-2024-567319.8Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and ac
CVE-2024-56720: Medium severity, CVSS 5.5 | Vulnix