CVE-2024-40952

🗓️ 12 Jul 2024 12:31:56Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 15 Views

In Linux kernel ocfs2_journal_dirty() vulnerability CVE-2024-40952 fixed by removing bdev->bd_super and using b_assoc_map->host->i_sb which leads to NULL pointer dereference. Reproducing by running xfstests generic/186

Reporter	Title	Published	Views	Family All 57
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2024-40952)	22 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6999-1)	11 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6999-2)	23 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7004-1)	12 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7005-1)	12 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)	13 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7008-1)	13 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7029-1)	23 Sep 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-40952	5 Aug 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	linux	0	linux_0_any.deb
Debian	12	any	linux	0	linux_0_any.deb
Debian	13	any	linux	6.9.7-1	linux_6.9.7-1_any.deb
Debian	14	any	linux	6.9.7-1	linux_6.9.7-1_any.deb
Debian	999	any	linux	6.9.7-1	linux_6.9.7-1_any.deb

12 Jul 2024 12:31Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00238

SSVC