CVE-2024-40939

July 12, 2024, 4:34 p.m.

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-07-12
CVE-2024-40939

Product(s) Impacted

Linux kernel

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Weaknesses

Date

Published: July 12, 2024, 1:15 p.m.

Last Modified: July 12, 2024, 4:34 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597
416baaa9-dc9f-4396-8d5f-8c081fb06d67