Linux net/bridge/br_multicast.c Heap Buffer Overflow DoS

The vulnerability of the brmulticastqueryexpired function in the net/bridge/brmulticast.c component of the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

CVE-2024-40921

CVE-2024-40921 impacts the Linux kernel’s networking stack, specifically the bridge/mst path: the change fixes passing a vlan group pointer to br_mst_vlan_set_state by using the already obtained group rather than dereferencing it again. Root cause is a non-functional dereference path related to a...