Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-40938
HistoryJul 12, 2024 - 1:15 p.m.

CVE-2024-40938

2024-07-1213:15:16
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
6
linux kernel
cve-2024-40938
vulnerability
landlock
d_parent walk

EPSS

0

Percentile

15.9%

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix d_parent walk

The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when
trying to link a root mount point. This cannot work in practice because
this directory is mounted, but the VFS check is done after the call to
security_path_link().

Do not use source directory’s d_parent when the source directory is the
mount point.

[mic: Fix commit message]