VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 27, 2024· Updated Jan 5, 2026

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

CVE-2024-56605

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

bt_sock_alloc() allocates the sk object and attaches it to the provided sock object. On error l2cap_sock_alloc() frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-free in other code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

262

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.