Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40921
HistoryJul 12, 2024 - 12:25 p.m.

CVE-2024-40921 net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

2024-07-1212:25:02
Linux
github.com
1
linux kernel
net
bridge
mst
vulnerability
cve-2024-40921

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

Pass the already obtained vlan group pointer to br_mst_vlan_set_state()
instead of dereferencing it again. Each caller has already correctly
dereferenced it for their context. This change is required for the
following suspicious RCU dereference fix. No functional changes
intended.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial