CVE-2024-40939: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
In case of region creation fail in ipcdevlinkcreateregion(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.95 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.35 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.99-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.9.7-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In net: wwan: iosm, decrease the region index before deleting previously created regions when ipc_devlink_create_region() fails, so deletion does not start from the tainted error-code pointer.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40939?
The severity of CVE-2024-40939 has been assessed as moderate.
How do I fix CVE-2024-40939?
To fix CVE-2024-40939, update to the recommended kernel versions listed in the vulnerability's documentation.
Which systems are affected by CVE-2024-40939?
CVE-2024-40939 affects multiple versions of the Linux kernel on Red Hat and Debian systems.
What is the nature of the vulnerability in CVE-2024-40939?
CVE-2024-40939 involves a tainted pointer issue occurring during the creation of IPC device link regions.
Is CVE-2024-40939 actively being exploited?
As of now, there have been no public reports of CVE-2024-40939 being actively exploited in the wild.