Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ CVE-2024-56639 — kernel

🟡 CVSS 5.5 — Medium ✅ No Known Exploit NVD
5.5
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

net: hsr: must allocate more bytes for RedBox support

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: must allocate more bytes for RedBox support

Blamed commit forgot to change hsr_init_skb() to allocate

larger skb for RedBox case.

Indeed, send_hsr_supervision_frame() will add

two additional components (struct hsr_sup_tlv

and struct hsr_sup_payload)

syzbot reported the following crash:

skbuff: skb_over_panic: text:ffffffff8afd4b0a len:34 put:6 head:ffff88802ad29e00 data:ffff88802ad29f22 tail:0x144 end:0x140 dev:gretap0

------------[ cut here ]------------

kernel BUG at net/core/skbuff.c:206 !

Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI

CPU: 2 UID: 0 PID: 7611 Comm: syz-executor Not tainted 6.12.0-syzkaller #0

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014

RIP: 0010:skb_panic+0x157/0x1d0 net/core/skbuff.c:206

Code: b6 04 01 84 c0 74 04 3c 03 7e 21 8b 4b 70 41 56 45 89 e8 48 c7 c7 a0 7d 9b 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 9a 76 79 f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 94 76 fb f8 4c

RSP: 0018:ffffc90000858ab8 EFLAGS: 00010282

RAX: 0000000000000087 RBX: ffff8880598c08c0 RCX: ffffffff816d3e69

RDX: 0000000000000000 RSI: ffffffff816de786 RDI: 0000000000000005

RBP: ffffffff8c9b91c0 R08: 0000000000000005 R09: 0000000000000000

R10: 0000000000000302 R11: ffffffff961cc1d0 R12: ffffffff8afd4b0a

R13: 0000000000000006 R14: ffff88804b938130 R15: 0000000000000140

FS: 000055558a3d6500(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007f1295974ff8 CR3: 000000002ab6e000 CR4: 0000000000352ef0

DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000

DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Call Trace:

<IRQ>

skb_over_panic net/core/skbuff.c:211 [inline]

skb_put+0x174/0x1b0 net/core/skbuff.c:2617

send_hsr_supervision_frame+0x6fa/0x9e0 net/hsr/hsr_device.c:342

hsr_proxy_announce+0x1a3/0x4a0 net/hsr/hsr_device.c:436

call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1794

expire_timers kernel/time/timer.c:1845 [inline]

__run_timers+0x6e8/0x930 kernel/time/timer.c:2419

__run_timer_base kernel/time/timer.c:2430 [inline]

__run_timer_base kernel/time/timer.c:2423 [inline]

run_timer_base+0x111/0x190 kernel/time/timer.c:2439

run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2449

handle_softirqs+0x213/0x8f0 kernel/softirq.c:554

__do_softirq kernel/softirq.c:588 [inline]

invoke_softirq kernel/softirq.c:428 [inline]

__irq_exit_rcu kernel/softirq.c:637 [inline]

irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649

instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]

sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049

</IRQ>

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs low-level privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality none, integrity none, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Attack vector: Local — a local account, shell or session on the host is needed.
  • Attack complexity: Low — the attack works reliably, with no preparation.
  • Privileges required: Low — an ordinary user account is enough.
  • User interaction: None — nobody has to be tricked into anything.
  • Scope: Unchanged — the damage stays inside the vulnerable component.
  • Confidentiality impact: None.
  • Integrity impact: None.
  • Availability impact: High — total loss, or loss the attacker controls.

Affected software

CVE-2024-56639 is recorded against 2 packages.

  • kernel (from 6.10.0 up to 6.12.5)
  • linux-kernel

Timeline and source

Published on 27 December 2024 and last revised on 12 August 2026. No public exploit is currently recorded for this entry. A vendor advisory or fix has been published. Record sourced from NVD.

References

git.kernel.org (Web)
git.kernel.org (Web)
github.com (Advisory)
nvd.nist.gov (Advisory)
git.kernel.org (Package)

Other advisories for this package

kernel has other advisories on record. If you are patching this one, these are worth checking on the same host:

Details

Severity Medium
CVSS Score 5.5
CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE N/A
Public Exploit ✅ No
Source NVD
Published 2024-12-27
Updated 2026-08-20
Modified 2026-08-12

Affected Packages

Software From version Fixed in
kernel 6.10.0 6.12.5
linux-kernel — —

Similar Threats

Vulnerability Monitoring

Track new vulnerabilities in kernel

CVE-2024-56639 is rated CVSS 5.5 Medium. BotEraser monitors your WordPress installation and notifies you when software you use appears in our vulnerability database.

Set Up Free Alerts →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesCVECVE 2024
✓