Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40938
HistoryJul 12, 2024 - 12:25 p.m.

CVE-2024-40938 landlock: Fix d_parent walk

2024-07-1212:25:14
Linux
github.com
1
linux kernel
vulnerability
landlock
fix
d_parent walk
warn_on_once()
collect_domain_accesses()
root mount point
vfs check
security_path_link()
mount point

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix d_parent walk

The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when
trying to link a root mount point. This cannot work in practice because
this directory is mounted, but the VFS check is done after the call to
security_path_link().

Do not use source directory’s d_parent when the source directory is the
mount point.

[mic: Fix commit message]

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial