CVE - CVE-2024-40939

CVE-ID
CVE-2024-40939	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050 URL:https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050 MISC:https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd URL:https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd MISC:https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547 URL:https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547 MISC:https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597 URL:https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)