CVE-2024-56751

5.5 · MEDIUM

Published Dec 29, 2024 linux EPSS 0.22% (12th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-56751 is a medium-severity vulnerability affecting linux linux_kernel. It was published on December 29, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: release nexthop on device removal

The CI is hitting some aperiodic hangup at device removal time in the

pmtu.sh self-test:

unregister_netdevice: waiting for veth_A-R1 to become free. Usage count = 6

ref_tracker: veth_A-R1@ffff888013df15d8 has 1/5 users at

dst_init+0x84/0x4a0

dst_alloc+0x97/0x150

ip6_dst_alloc+0x23/0x90

ip6_rt_pcpu_alloc+0x1e6/0x520

ip6_pol_route+0x56f/0x840

fib6_rule_lookup+0x334/0x630

ip6_route_output_flags+0x259/0x480

ip6_dst_lookup_tail.constprop.0+0x5c2/0x940

ip6_dst_lookup_flow+0x88/0x190

udp_tunnel6_dst_lookup+0x2a7/0x4c0

vxlan_xmit_one+0xbde/0x4a50 [vxlan]

vxlan_xmit+0x9ad/0xf20 [vxlan]

dev_hard_start_xmit+0x10e/0x360

__dev_queue_xmit+0xf95/0x18c0

arp_solicit+0x4a2/0xe00

neigh_probe+0xaa/0xf0

While the first suspect is the dst_cache, explicitly tracking the dst

owing the last device reference via probes proved such dst is held by

the nexthop in the originating fib6_info

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.3, < 6.1.120	Affected

References

Ref git.kernel.org/stable/c/0e4c6faaef8a24b762a24ffb767280e263ef8e10 Ref git.kernel.org/stable/c/43e25adc80269f917d2a195f0d59f74cdd182955 Ref git.kernel.org/stable/c/77aa9855a878fb43f547ddfbda3127a1e88ad31a Ref git.kernel.org/stable/c/a3c3f8a4d025acc8c857246ec2b812c59102487a Ref git.kernel.org/stable/c/b2f26a27ea3f72f75d18330f76f5d1007c791848 Ref git.kernel.org/stable/c/eb02688c5c45c3e7af7e71f036a7144f5639cbfe Ref lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Frequently Asked Questions

What is CVE-2024-56751?

CVE-2024-56751 is a medium-severity vulnerability affecting linux linux_kernel. It was published on December 29, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-56751?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-56751?

How can CyberStrike help with CVE-2024-56751?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-56751 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719