01 Record

CVE-2024-56605

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 15.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-27 14:51Z1 YR AGO

Last updated

2026-08-05 11:45Z2 MO AGO

Reserved

2024-12-27

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

7c4d122acf477dd59ec168a73c5a9b92c534323bc8b4d08926d30660625cf8bc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux49dfbb9129c4edb318578de35cc45c555df37884 to < f6ad641646b67f29c7578dcd6c25813c7dcbf51e, 49dfbb9129c4edb318578de35cc45c555df37884 to < daa13175a6dea312a76099066cb4cbd4fc959a84, 49dfbb9129c4edb318578de35cc45c555df37884 to < a8677028dd5123e5e525b8195483994d87123de4, 49dfbb9129c4edb318578de35cc45c555df37884 to < bb2f2342a6ddf7c04f9aefbbfe86104cd138e629, 49dfbb9129c4edb318578de35cc45c555df37884 to < 8ad09ddc63ace3950ac43db6fbfe25b40f589dd6, 49dfbb9129c4edb318578de35cc45c555df37884 to < 61686abc2f3c2c67822aa23ce6f160467ec83d35, 49dfbb9129c4edb318578de35cc45c555df37884 to < 7c4f78cdb8e7501e9f92d291a7d956591bf73be9, 3.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f6ad641646b67f29c7578dcd6c25813c7dcbf51e
git.kernel.orghttps://git.kernel.org/stable/c/daa13175a6dea312a76099066cb4cbd4fc959a84
git.kernel.orghttps://git.kernel.org/stable/c/a8677028dd5123e5e525b8195483994d87123de4
git.kernel.orghttps://git.kernel.org/stable/c/bb2f2342a6ddf7c04f9aefbbfe86104cd138e629
git.kernel.orghttps://git.kernel.org/stable/c/8ad09ddc63ace3950ac43db6fbfe25b40f589dd6
git.kernel.orghttps://git.kernel.org/stable/c/61686abc2f3c2c67822aa23ce6f160467ec83d35
git.kernel.orghttps://git.kernel.org/stable/c/7c4f78cdb8e7501e9f92d291a7d956591bf73be9
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.123-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.