Lucene search

K
osvGoogleOSV:CVE-2024-40985
HistoryJul 12, 2024 - 1:15 p.m.

CVE-2024-40985

2024-07-1213:15:20
Google
osv.dev
6
linux kernel
vulnerability
resolved
tcp-ao
patches
selftests
kmemtest
kcov

AI Score

9

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

net/tcp_ao: Don’t leak ao_info on error-path

It seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on
version 5 1 of TCP-AO patches. Quite frustrative that having all these
selftests that I’ve written, running kmemtest & kcov was always in todo.