Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40985
HistoryJul 12, 2024 - 12:37 p.m.

CVE-2024-40985 net/tcp_ao: Don't leak ao_info on error-path

2024-07-1212:37:31
Linux
github.com
2
linux kernel
net/tcp_ao
vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net/tcp_ao: Don’t leak ao_info on error-path

It seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on
version 5 1 of TCP-AO patches. Quite frustrative that having all these
selftests that I’ve written, running kmemtest & kcov was always in todo.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial