Threats tagged 'ghsa-98rc-vgv3-572h'

CVE-2024-56603 is a use-after-free vulnerability in the Linux kernel's CAN network protocol implementation. The flaw occurs in the can_create() function where, on error, the allocated socket (sk) object is freed but a dangling pointer remains attached to the sock object. This can lead to memory corruption and potentially allow an attacker with local privileges to cause denial of service or escalate privileges.