CVE-2024-40920

תיאור (מקור, אנגלית)

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU deref helper to fix the suspicious rcu usage warning.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-4/8/2026

CWE

CWE-416

מוצרים מושפעים

linux: linux kernel

קישורים

• https://git.kernel.org/stable/c/406bfc04b01ee47e4c626f77ecc7d9f85135b166 Patch
• https://git.kernel.org/stable/c/546ceb1dfdac866648ec959cbc71d9525bd73462 Patch
• https://git.kernel.org/stable/c/7caefa2771722e65496d85b62e1dc4442b7d1345 Patch
• https://git.kernel.org/stable/c/caaa2129784a04dcade0ea92c12e6ff90bbd23d8 Patch
• https://git.kernel.org/stable/c/406bfc04b01ee47e4c626f77ecc7d9f85135b166 Patch
• https://git.kernel.org/stable/c/546ceb1dfdac866648ec959cbc71d9525bd73462 Patch
• https://git.kernel.org/stable/c/7caefa2771722e65496d85b62e1dc4442b7d1345 Patch
• https://git.kernel.org/stable/c/caaa2129784a04dcade0ea92c12e6ff90bbd23d8 Patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html