CVE-2024-40939: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
In case of region creation fail in ipcdevlinkcreateregion(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40939?
The severity of CVE-2024-40939 has been assessed as moderate.
How do I fix CVE-2024-40939?
To fix CVE-2024-40939, update to the recommended kernel versions listed in the vulnerability's documentation.
Which systems are affected by CVE-2024-40939?
CVE-2024-40939 affects multiple versions of the Linux kernel on Red Hat and Debian systems.
What is the nature of the vulnerability in CVE-2024-40939?
CVE-2024-40939 involves a tainted pointer issue occurring during the creation of IPC device link regions.
Is CVE-2024-40939 actively being exploited?
As of now, there have been no public reports of CVE-2024-40939 being actively exploited in the wild.