Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.0

Linux kernel socket map may release wrong socket

CVE-2024-56664 · published 1 year ago
Summary

The Linux kernel’s socket‑map feature could mistakenly free a network connection when one connection is replaced while another is being closed. This can cause the wrong socket to be closed, potentially disrupting network traffic. Updating the kernel to the latest version resolves the issue.

What to do
  • Update canonical linux-aws-5.4 to version 5.4.0-1152.162~18.04.1.
  • Update canonical linux-azure-5.4 to version 5.4.0-1156.163~18.04.1.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1155.164~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-223.243~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1098.103~18.04.1.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1150.160~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1135.148~18.04.1.
  • Update canonical linux to version 5.4.0-223.243.
  • Update canonical linux-aws to version 5.4.0-1152.162.
  • Update canonical linux-aws-5.15 to version 5.15.0-1086.93~20.04.1.
  • Update canonical linux-azure to version 5.4.0-1156.163.
  • Update canonical linux-azure-5.15 to version 5.15.0-1091.100~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1111.118.
  • Update canonical linux-gcp to version 5.4.0-1155.164.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1085.94~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-142.152~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1098.103.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1078.81~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1083.89~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1056.59.
  • Update canonical linux-kvm to version 5.4.0-1139.148.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-142.152~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
  • Update canonical linux-oracle to version 5.4.0-1150.160.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1083.89~20.04.1.
  • Update canonical linux-raspi to version 5.4.0-1135.148.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1081.85~20.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.4.0-1070.74.
  • Update canonical linux-aws-fips to version 5.4.0-1152.162+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1157.164+fips1.
  • Update canonical linux-fips to version 5.4.0-1126.136.
  • Update canonical linux-gcp-fips to version 5.4.0-1155.164+fips1.
  • Update canonical linux to version 5.15.0-142.152.
  • Update canonical linux-aws to version 5.15.0-1086.93.
  • Update canonical linux-aws-6.8 to version 6.8.0-1029.31~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1091.100.
  • Update canonical linux-azure-6.8 to version 6.8.0-1029.34~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1085.94.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1030.32~22.04.1.
  • Update canonical linux-gke to version 5.15.0-1083.89.
  • Update canonical linux-gkeop to version 5.15.0-1068.76.
  • Update canonical linux-hwe-6.8 to version 6.8.0-60.63~22.04.1.
  • Update canonical linux-ibm to version 5.15.0-1078.81.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1026.26~22.04.1.
  • Update canonical linux-intel-iotg to version 5.15.0-1081.87.
  • Update canonical linux-kvm to version 5.15.0-1082.87.
  • Update canonical linux-lowlatency to version 5.15.0-142.152.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-60.63.1~22.04.1.
  • Update canonical linux-nvidia to version 5.15.0-1080.81.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1028.31~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1039.39.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1028.28.
  • Update canonical linux-oracle to version 5.15.0-1083.89.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1026.27~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1080.83.
  • Update canonical linux-riscv-6.8 to version 6.8.0-62.65~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1050.54.
  • Update canonical linux-bluefield to version 5.15.0-1069.71.
  • Update canonical linux-aws-fips to version 5.15.0-1086.93+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1091.100+fips1.
  • Update canonical linux-fips to version 5.15.0-142.152+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1085.94+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1079.81.
  • Update canonical linux-realtime to version 5.15.0-1086.95.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1022.23~22.04.1.
  • Update canonical linux to version 6.8.0-60.63.
  • Update canonical linux-aws to version 6.8.0-1029.31.
  • Update canonical linux-azure to version 6.8.0-1029.34.
  • Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
  • Update canonical linux-azure-nvidia to version 6.8.0-1016.17.
  • Update canonical linux-gcp to version 6.8.0-1030.32.
  • Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1025.29.
  • Update canonical linux-gkeop to version 6.8.0-1012.14.
  • Update canonical linux-hwe-6.11 to version 6.11.0-21.21~24.04.1.
  • Update canonical linux-ibm to version 6.8.0-1026.26.
  • Update canonical linux-lowlatency to version 6.8.0-60.63.1.
  • Update canonical linux-nvidia to version 6.8.0-1028.31.
  • Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1028.31.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
  • Update canonical linux-oem-6.11 to version 6.11.0-1017.17.
  • Update canonical linux-oem-6.8 to version 6.8.0-1028.28.
  • Update canonical linux-oracle to version 6.8.0-1026.27.
  • Update canonical linux-raspi to version 6.8.0-1028.32.
  • Update canonical linux-riscv to version 6.8.0-60.63.1.
  • Update canonical linux-xilinx to version 6.8.0-1017.18.
  • Update canonical linux-fips to version 6.8.0-78.78+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
  • Update canonical linux-realtime to version 6.8.1-1022.23.
  • Update linux kernel to version 6.12.6.
  • Update debian linux to version 6.1.128-1.
  • Update debian linux to version 6.12.6-1.
  • Update canonical linux-azure-fde to version 5.15.0-1091.100.1.
  • Update linux linux to version 6deb9e85dc9a2ba4414b91c1b5b00b8415910890 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 4.20, < 6.6.67
>= 6.7, < 6.12.6
6.13
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1152.162~18.04.1
Fix: upgrade to 5.4.0-1152.162~18.04.1
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1156.163~18.04.1
Fix: upgrade to 5.4.0-1156.163~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1155.164~18.04.1
Fix: upgrade to 5.4.0-1155.164~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-223.243~18.04.1
Fix: upgrade to 5.4.0-223.243~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1098.103~18.04.1
Fix: upgrade to 5.4.0-1098.103~18.04.1
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1150.160~18.04.1
Fix: upgrade to 5.4.0-1150.160~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1135.148~18.04.1
Fix: upgrade to 5.4.0-1135.148~18.04.1
Ubuntu:Pro:20.04:LTS canonical linux < 5.4.0-223.243
Fix: upgrade to 5.4.0-223.243
Ubuntu:Pro:20.04:LTS canonical linux-aws < 5.4.0-1152.162
Fix: upgrade to 5.4.0-1152.162
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1086.93~20.04.1
Fix: upgrade to 5.15.0-1086.93~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure < 5.4.0-1156.163
Fix: upgrade to 5.4.0-1156.163
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1091.100~20.04.1
Fix: upgrade to 5.15.0-1091.100~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield < 5.4.0-1111.118
Fix: upgrade to 5.4.0-1111.118
Ubuntu:Pro:20.04:LTS canonical linux-gcp < 5.4.0-1155.164
Fix: upgrade to 5.4.0-1155.164
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1085.94~20.04.1
Fix: upgrade to 5.15.0-1085.94~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-142.152~20.04.1
Fix: upgrade to 5.15.0-142.152~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm < 5.4.0-1098.103
Fix: upgrade to 5.4.0-1098.103
Showing 50 of 178. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1078.81~20.04.1
Fix: upgrade to 5.15.0-1078.81~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1083.89~20.04.1
Fix: upgrade to 5.15.0-1083.89~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-iot < 5.4.0-1056.59
Fix: upgrade to 5.4.0-1056.59
Ubuntu:Pro:20.04:LTS canonical linux-kvm < 5.4.0-1139.148
Fix: upgrade to 5.4.0-1139.148
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-142.152~20.04.1
Fix: upgrade to 5.15.0-142.152~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1039.39~20.04.1
Fix: upgrade to 5.15.0-1039.39~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle < 5.4.0-1150.160
Fix: upgrade to 5.4.0-1150.160
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1083.89~20.04.1
Fix: upgrade to 5.15.0-1083.89~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi < 5.4.0-1135.148
Fix: upgrade to 5.4.0-1135.148
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1081.85~20.04.1
Fix: upgrade to 5.15.0-1081.85~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp < 5.4.0-1070.74
Fix: upgrade to 5.4.0-1070.74
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1152.162+fips1
Fix: upgrade to 5.4.0-1152.162+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1157.164+fips1
Fix: upgrade to 5.4.0-1157.164+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1126.136
Fix: upgrade to 5.4.0-1126.136
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1155.164+fips1
Fix: upgrade to 5.4.0-1155.164+fips1
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-142.152
Fix: upgrade to 5.15.0-142.152
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1086.93
Fix: upgrade to 5.15.0-1086.93
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1029.31~22.04.1
Fix: upgrade to 6.8.0-1029.31~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1091.100
Fix: upgrade to 5.15.0-1091.100
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1029.34~22.04.1
Fix: upgrade to 6.8.0-1029.34~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1085.94
Fix: upgrade to 5.15.0-1085.94
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1030.32~22.04.1
Fix: upgrade to 6.8.0-1030.32~22.04.1
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1083.89
Fix: upgrade to 5.15.0-1083.89
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1068.76
Fix: upgrade to 5.15.0-1068.76
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-60.63~22.04.1
Fix: upgrade to 6.8.0-60.63~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1078.81
Fix: upgrade to 5.15.0-1078.81
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1026.26~22.04.1
Fix: upgrade to 6.8.0-1026.26~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1081.87
Fix: upgrade to 5.15.0-1081.87
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1082.87
Fix: upgrade to 5.15.0-1082.87
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-142.152
Fix: upgrade to 5.15.0-142.152
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-60.63.1~22.04.1
Fix: upgrade to 6.8.0-60.63.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1080.81
Fix: upgrade to 5.15.0-1080.81
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1028.31~22.04.1
Fix: upgrade to 6.8.0-1028.31~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1039.39
Fix: upgrade to 5.15.0-1039.39
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1028.28
Fix: upgrade to 5.15.0-1028.28
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1083.89
Fix: upgrade to 5.15.0-1083.89
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1026.27~22.04.1
Fix: upgrade to 6.8.0-1026.27~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1080.83
Fix: upgrade to 5.15.0-1080.83
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-62.65~22.04.1
Fix: upgrade to 6.8.0-62.65~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1050.54
Fix: upgrade to 5.15.0-1050.54
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1069.71
Fix: upgrade to 5.15.0-1069.71
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1086.93+fips1
Fix: upgrade to 5.15.0-1086.93+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1091.100+fips1
Fix: upgrade to 5.15.0-1091.100+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-142.152+fips1
Fix: upgrade to 5.15.0-142.152+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1085.94+fips1
Fix: upgrade to 5.15.0-1085.94+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1079.81
Fix: upgrade to 5.15.0-1079.81
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1086.95
Fix: upgrade to 5.15.0-1086.95
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1022.23~22.04.1
Fix: upgrade to 6.8.1-1022.23~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-60.63
Fix: upgrade to 6.8.0-60.63
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1029.31
Fix: upgrade to 6.8.0-1029.31
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1029.34
Fix: upgrade to 6.8.0-1029.34
Ubuntu:24.04:LTS canonical linux-azure-6.11 < 6.11.0-1012.12~24.04.1
Fix: upgrade to 6.11.0-1012.12~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-nvidia < 6.8.0-1016.17
Fix: upgrade to 6.8.0-1016.17
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1030.32
Fix: upgrade to 6.8.0-1030.32
Ubuntu:24.04:LTS canonical linux-gcp-6.11 < 6.11.0-1011.11~24.04.1
Fix: upgrade to 6.11.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1025.29
Fix: upgrade to 6.8.0-1025.29
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1012.14
Fix: upgrade to 6.8.0-1012.14
Ubuntu:24.04:LTS canonical linux-hwe-6.11 < 6.11.0-21.21~24.04.1
Fix: upgrade to 6.11.0-21.21~24.04.1
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1026.26
Fix: upgrade to 6.8.0-1026.26
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-60.63.1
Fix: upgrade to 6.8.0-60.63.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1028.31
Fix: upgrade to 6.8.0-1028.31
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 < 6.11.0-1007.7
Fix: upgrade to 6.11.0-1007.7
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1028.31.1
Fix: upgrade to 6.8.0-1028.31.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oem-6.11 < 6.11.0-1017.17
Fix: upgrade to 6.11.0-1017.17
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1028.28
Fix: upgrade to 6.8.0-1028.28
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1026.27
Fix: upgrade to 6.8.0-1026.27
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1028.32
Fix: upgrade to 6.8.0-1028.32
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-60.63.1
Fix: upgrade to 6.8.0-60.63.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1017.18
Fix: upgrade to 6.8.0-1017.18
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-78.78+fips1
Fix: upgrade to 6.8.0-78.78+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2023.24
Fix: upgrade to 6.8.0-2023.24
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1022.23
Fix: upgrade to 6.8.1-1022.23
– linux linux < 6deb9e85dc9a2ba4414b91c1b5b00b8415910890
4.20
Linux linux kernel >= 6.7.0, < 6.12.6
Fix: upgrade to 6.12.6
Debian:12 debian linux < 6.1.128-1
Fix: upgrade to 6.1.128-1
Debian:13 debian linux < 6.12.6-1
Fix: upgrade to 6.12.6-1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1091.100.1
Fix: upgrade to 5.15.0-1091.100.1
Original advisory text
bpf, sockmap: Fix race between element replace and close()
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket different from the one stored) may race with socket's close() link popping & unlinking. __sock_map_delete() unconditionally unrefs the (wrong) element: // set map[0] = s0 map_update_elem(map, 0, s0) // drop fd of s0 close(s0) sock_map_close() lock_sock(sk) (s0!) sock_map_remove_links(sk) link = sk_psock_link_pop() sock_map_unlink(sk, link) sock_map_delete_from_link // replace map[0] with s1 map_update_elem(map, 0, s1) sock_map_update_elem (s1!) lock_sock(sk) sock_map_update_common psock = sk_psock(sk) spin_lock(&stab->lock) osk = stab->sks[idx] sock_map_add_link(..., &stab->sks[idx]) sock_map_unref(osk, &stab->sks[idx]) psock = sk_psock(osk) sk_psock_put(sk, psock) if (refcount_dec_and_test(&psock)) sk_psock_drop(sk, psock) spin_unlock(&stab->lock) unlock_sock(sk) __sock_map_delete spin_lock(&stab->lock) sk = *psk // s1 replaced s0; sk == s1 if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch sk = xchg(psk, NULL) if (sk) sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle psock = sk_psock(sk) sk_psock_put(sk, psock) if (refcount_dec_and_test()) sk_psock_drop(sk, psock) spin_unlock(&stab->lock) release_sock(sk) Then close(map) enqueues bpf_map_free_deferred, which finally calls sock_map_free(). This results in some refcount_t warnings along with a KASAN splat [1]. Fix __sock_map_delete(), do not allow sock_map_unref() on elements that may have been replaced. [1]: BUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330 Write of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063 CPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014 Workqueue: events_unbound bpf_map_free_deferred Call Trace: <TASK> dump_stack_lvl+0x68/0x90 print_report+0x174/0x4f6 kasan_report+0xb9/0x190 kasan_check_range+0x10f/0x1e0 sock_map_free+0x10e/0x330 bpf_map_free_deferred+0x173/0x320 process_one_work+0x846/0x1420 worker_thread+0x5b3/0xf80 kthread+0x29e/0x360 ret_from_fork+0x2d/0x70 ret_from_fork_asm+0x1a/0x30 </TASK> Allocated by task 1202: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 __kasan_slab_alloc+0x85/0x90 kmem_cache_alloc_noprof+0x131/0x450 sk_prot_alloc+0x5b/0x220 sk_alloc+0x2c/0x870 unix_create1+0x88/0x8a0 unix_create+0xc5/0x180 __sock_create+0x241/0x650 __sys_socketpair+0x1ce/0x420 __x64_sys_socketpair+0x92/0x100 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e Freed by task 46: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x37/0x60 __kasan_slab_free+0x4b/0x70 kmem_cache_free+0x1a1/0x590 __sk_destruct+0x388/0x5a0 sk_psock_destroy+0x73e/0xa50 process_one_work+0x846/0x1420 worker_thread+0x5b3/0xf80 kthread+0x29e/0x360 ret_from_fork+0x2d/0x70 ret_from_fork_asm+0x1a/0x30 The bu ---truncated---
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.0 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-362Race Condition
CWE-416Use After Free
Timeline
Published27 Dec 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-56664 · OSV
CVE-2024-56664 · NVD
CVE-2024-56664 · MITRE
UBUNTU-CVE-2024-56664 · OSV
DEBIAN-CVE-2024-56664 · OSV
Track software like this
Free during beta