CVE-2024-40920

Katalog CVE

CVSS 7.8 · High EPSS 0,42%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU deref helper to fix the suspicious rcu usage warning.

Rincian

Terbit di NVD

12 Juli 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/406bfc04b01ee47e4c626f77ecc7d9f85135b166 patch
• https://git.kernel.org/stable/c/546ceb1dfdac866648ec959cbc71d9525bd73462 patch
• https://git.kernel.org/stable/c/7caefa2771722e65496d85b62e1dc4442b7d1345 patch
• https://git.kernel.org/stable/c/caaa2129784a04dcade0ea92c12e6ff90bbd23d8 patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html