CVE - CVE-2024-40937

CVE-ID
CVE-2024-40937	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent call to napi_get_frags returning a dangling pointer. Fix this by clearing napi->skb before the skb is freed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2ce5341c36993b776012601921d7688693f8c037 URL:https://git.kernel.org/stable/c/2ce5341c36993b776012601921d7688693f8c037 MISC:https://git.kernel.org/stable/c/6f4d93b78ade0a4c2cafd587f7b429ce95abb02e URL:https://git.kernel.org/stable/c/6f4d93b78ade0a4c2cafd587f7b429ce95abb02e MISC:https://git.kernel.org/stable/c/75afd8724739ee5ed8165acde5f6ac3988b485cc URL:https://git.kernel.org/stable/c/75afd8724739ee5ed8165acde5f6ac3988b485cc MISC:https://git.kernel.org/stable/c/a68184d5b420ea4fc7e6b7ceb52bbc66f90d3c50 URL:https://git.kernel.org/stable/c/a68184d5b420ea4fc7e6b7ceb52bbc66f90d3c50 MISC:https://git.kernel.org/stable/c/d221284991118c0ab16480b53baecd857c0bc442 URL:https://git.kernel.org/stable/c/d221284991118c0ab16480b53baecd857c0bc442
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)