CVE-2024-56661

A vulnerability was found in the Linux kernel's TIPC module in the cleanup_bearer() function involving a NULL pointer dereference when attempting to decrement a reference count on an uninitialized socket. This issue occurs due to missing validation of a NULL pointer, leading to a kernel crash and denial of service.

The vulnerability is rated as moderate severity because it requires specific conditions to trigger, such as invoking the affected function in a certain context, while it can cause a denial of service, it does not lead to unauthorized access, privilege escalation, or compromise of sensitive data, limiting its overall impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.