Lucene search

K
osvGoogleOSV:CVE-2024-40921
HistoryJul 12, 2024 - 1:15 p.m.

CVE-2024-40921

2024-07-1213:15:15
Google
osv.dev
2
linux kernel
vulnerability
cve-2024-40921
net
bridge
mst
vlan group
br_mst_vlan_set_state

AI Score

8.3

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

Pass the already obtained vlan group pointer to br_mst_vlan_set_state()
instead of dereferencing it again. Each caller has already correctly
dereferenced it for their context. This change is required for the
following suspicious RCU dereference fix. No functional changes
intended.

AI Score

8.3

Confidence

High