CVE-2024-40920

July 12, 2024, 4:34 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU deref helper to fix the suspicious rcu usage warning.

Product(s) Impacted

Product Versions
Linux kernel

Weaknesses

References

https://git.kernel.org/stable/c/406bfc04b01ee47e4c626f77ecc7d9f85135b166
https://git.kernel.org/stable/c/546ceb1dfdac866648ec959cbc71d9525bd73462
https://git.kernel.org/stable/c/7caefa2771722e65496d85b62e1dc4442b7d1345
https://git.kernel.org/stable/c/caaa2129784a04dcade0ea92c12e6ff90bbd23d8

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-07-12
CVE-2024-40920

Date

  • Published: July 12, 2024, 1:15 p.m.
  • Last Modified: July 12, 2024, 4:34 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.