CVE-2024-40921 net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

2024-07-1212:25:02

Linux

www.cve.org

linux kernel

vulnerability

net bridge

mst

vlan group

br_mst_vlan_set_state

rcu dereference fix

EPSS

Percentile

15.9%

JSON

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

Pass the already obtained vlan group pointer to br_mst_vlan_set_state()
instead of dereferencing it again. Each caller has already correctly
dereferenced it for their context. This change is required for the
following suspicious RCU dereference fix. No functional changes
intended.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bridge/br_mst.c"
    ],
    "versions": [
      {
        "version": "8ca9a750fc71",
        "lessThan": "09f4337c27f5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4488617e5e99",
        "lessThan": "a6cc9e9a651b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e43dd2b1ec74",
        "lessThan": "d2dc02775fc0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3a7c1661ae13",
        "lessThan": "36c92936e868",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bridge/br_mst.c"
    ],
    "versions": [
      {
        "version": "6.1.93",
        "lessThan": "6.1.95",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.6.33",
        "lessThan": "6.6.35",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.9.3",
        "lessThan": "6.9.6",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]