CVE-2024-40921
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
Summary
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
Pass the already obtained vlan group pointer to br_mst_vlan_set_state()
instead of dereferencing it again. Each caller has already correctly
dereferenced it for their context. This change is required for the
following suspicious RCU dereference fix. No functional changes
intended.
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.93"},{"fixed":"6.1.95"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.6.33"},{"fixed":"6.6.35"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.9.3"},{"fixed":"6.9.6"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-40921 linux Fixed in: 6.1.99-1
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web lists.debian.org