CVE - CVE-2024-40909

CVE-ID
CVE-2024-40909	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a URL:https://git.kernel.org/stable/c/2884dc7d08d98a89d8d65121524bb7533183a63a MISC:https://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209 URL:https://git.kernel.org/stable/c/91cff53136daeff50816b0baeafd38a6976f6209 MISC:https://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382 URL:https://git.kernel.org/stable/c/fa97b8fed9896f1e89cb657513e483a152d4c382
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)