7.1

CVE-2024-56650: linux Out-of-bounds Read

CVSS: 7.1v3.1HighModified
AliasesSUSE-SU-2025:1392-1SUSE-SU-2025:1408-1SUSE-SU-2025:1418-1
Published 27-12-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-56650 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.8% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.27%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 88 · Related 85
DLA-4075-1DLA-4076-1MGASA-2025-0030MGASA-2025-0032SUSE-SU-2025:0428-1SUSE-SU-2025:0499-1

Timeline

  1. 27-12-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN: BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read of size 1 at addr ffff8881022da0c8 by task repro/5879 ... Call Trace: <TASK> dump_stack_lvl+0x241/0x360 ? __pfx_dump_stack_lvl+0x10/0x10 ? __pfx__printk+0x10/0x10 ? _printk+0xd5/0x120 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x183/0x530 print_report+0x169/0x550 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x45f/0x530 ? __phys_addr+0xba/0x170 ? strlen+0x58/0x70 kasan_report+0x143/0x180 ? strlen+0x58/0x70 strlen+0x58/0x70 kstrdup+0x20/0x80 led_tg_check+0x18b/0x3c0 xt_check_target+0x3bb/0xa40 ? __pfx_xt_check_target+0x10/0x10 ? stack_depot_save_flags+0x6e4/0x830 ? nft_target_init+0x174/0xc30 nft_target_init+0x82d/0xc30 ? __pfx_nft_target_init+0x10/0x10 ? nf_tables_newrule+0x1609/0x2980 ? nf_tables_newrule+0x1609/0x2980 ? rcu_is_watching+0x15/0xb0 ? nf_tables_newrule+0x1609/0x2980 ? nf_tables_newrule+0x1609/0x2980 ? __kmalloc_noprof+0x21a/0x400 nf_tables_newrule+0x1860/0x2980 ? __pfx_nf_tables_newrule+0x10/0x10 ? __nla_parse+0x40/0x60 nfnetlink_rcv+0x14e5/0x2ab0 ? __pfx_validate_chain+0x10/0x10 ? __pfx_nfnetlink_rcv+0x10/0x10 ? __lock_acquire+0x1384/0x2050 ? netlink_deliver_tap+0x2e/0x1b0 ? __pfx_lock_release+0x10/0x10 ? netlink_deliver_tap+0x2e/0x1b0 netlink_unicast+0x7f8/0x990 ? __pfx_netlink_unicast+0x10/0x10 ? __virt_addr_valid+0x183/0x530 ? __check_object_size+0x48e/0x900 netlink_sendmsg+0x8e4/0xcb0 ? __pfx_netlink_sendmsg+0x10/0x10 ? aa_sock_msg_perm+0x91/0x160 ? __pfx_netlink_sendmsg+0x10/0x10 __sock_sendmsg+0x223/0x270 ____sys_sendmsg+0x52a/0x7e0 ? __pfx_____sys_sendmsg+0x10/0x10 __sys_sendmsg+0x292/0x380 ? __pfx___sys_sendmsg+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x43d/0x780 ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 ? exc_page_fault+0x590/0x8c0 ? do_syscall_64+0xb6/0x230 do_syscall_64+0xf3/0x230 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... </TASK> Since an invalid (without '\0' byte at all) byte sequence may be passed from userspace, add an extra check to ensure that such a sequence is rejected as possible ID and so never passed to 'kstrdup()' and further.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

18%

Versus all other CVEs

30-day change

+0.01 pp

From 0.26% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu135 products
  • linuxAll versions (No fix recorded) | < 4.4.0-268.302 | < 4.15.0-237.249 | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1143.149 | < 4.4.0-1181.196 | < 4.15.0-1180.193 | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Suse7 products
  • kernel-livepatch-SLE15-SP3_Update_51&distro=SUSE Linux Enterprise Live Patching 15 SP3< 4-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_52&distro=SUSE Linux Enterprise Live Patching 15 SP3< 4-150300.2.1
  • kernel-livepatch-SLE15-SP4_Update_35&distro=SUSE Linux Enterprise Live Patching 15 SP4< 5-150400.2.1
  • kernel-livepatch-SLE15-SP5_Update_21&distro=SUSE Linux Enterprise Live Patching 15 SP5< 4-150500.2.1
  • kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6< 5-150600.2.1
Linux2 products
  • linux≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < 147a42bb02de8735cb08476be6d0917987d022c2 | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < ad28612ebae1fcc1104bd432e99e99d87f6bfe09 | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < 36a9d94dac28beef6b8abba46ba8874320d3e800 | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < ab9916321c95f5280b72b4c5055e269f98627efe | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < a9bcc0b70d9baf3ff005874489a0dc9d023b54c3 | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < c40c96d98e536fc1daaa125c2332b988615e30a4 | ≥ 268cb38e1802db560c73167e643f14a3dcb4b07c, < 04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7 | 2.6.30
  • linux_kernel≥ 2.6.30, < 5.4.287 | ≥ 5.5, < 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.66 | ≥ 6.7, < 6.12.5 | 6.13:rc1
Debian1 product
  • linux< 6.1.123-1 | < 6.12.5-1

4 vendors · 145 products

References

67 links
Show all 67 references