PT-2024-36971

CVE-2024-56661

·

Published

2024-12-04

·

Updated

2026-10-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74
Description A NULL pointer dereference issue was found in the Linux kernel, specifically in the cleanup bearer() function. This issue occurred when the ub->ubsock->sk pointer was NULL, causing a general protection fault. The problem was resolved by caching the tipc net pointer. The issue was identified by syzbot and is related to a non-canonical address.
Recommendations To resolve this issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the cleanup bearer() function until a patch is available. However, this is not a recommended long-term solution, as it may have unintended consequences on system stability and performance.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2025-1059
ALT-PU-2025-1879
ALT-PU-2025-3496
CLSA-2025-1747430081
CLSA-2025-1747431461
DLA-4075-1
DLA-4076-1
MGASA-2025-0030
MGASA-2025-0032
OPENSUSE-SU-2025_01633-1
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0556-1
OPENSUSE-SU-2025_0557-1
OPENSUSE-SU-2025_0576-1
OPENSUSE-SU-2025_0577-1
SUSE-SU-2025:01633-1
SUSE-SU-2025_01633-1
SUSE-SU-2025:0289-1
SUSE-SU-2025:0428-1
SUSE-SU-2025_0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025_0499-1
SUSE-SU-2025:0555-1
SUSE-SU-2025:0556-1
SUSE-SU-2025:0557-1
SUSE-SU-2025_0557-1
SUSE-SU-2025:0565-1
SUSE-SU-2025:0576-1
SUSE-SU-2025:0577-1
SUSE-SU-2025_0577-1
SUSE-SU-2025:0577-2
SUSE-SU-2025_0577-2
SUSE-SU-2025:1574-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
Found an issue in the description? Have something to add? Feel free to write us 👾