CVE - CVE-2024-40938

CVE-ID
CVE-2024-40938	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mounted, but the VFS check is done after the call to security_path_link(). Do not use source directory's d_parent when the source directory is the mount point. [mic: Fix commit message]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/88da52ccd66e65f2e63a6c35c9dff55d448ef4dc URL:https://git.kernel.org/stable/c/88da52ccd66e65f2e63a6c35c9dff55d448ef4dc MISC:https://git.kernel.org/stable/c/b6e5e696435832b33e40775f060ef5c95f4fda1f URL:https://git.kernel.org/stable/c/b6e5e696435832b33e40775f060ef5c95f4fda1f MISC:https://git.kernel.org/stable/c/c7618c7b0b8c45bcef34410cc1d1e953eb17f8f6 URL:https://git.kernel.org/stable/c/c7618c7b0b8c45bcef34410cc1d1e953eb17f8f6 MISC:https://git.kernel.org/stable/c/cc30d05b34f9a087a6928d09b131f7b491e9ab11 URL:https://git.kernel.org/stable/c/cc30d05b34f9a087a6928d09b131f7b491e9ab11
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)