Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40920
HistoryJul 12, 2024 - 12:25 p.m.

CVE-2024-40920 net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

2024-07-1212:25:02
Linux
github.com
1
linux kernel
net bridge mst
vulnerability fix
cve-2024-40920

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

I converted br_mst_set_state to RCU to avoid a vlan use-after-free
but forgot to change the vlan group dereference helper. Switch to vlan
group RCU deref helper to fix the suspicious rcu usage warning.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial