Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-40920

net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

Description

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU deref helper to fix the suspicious rcu usage warning.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8ca9a750fc711911ef616ceb627d07357b04545e to < caaa2129784a04dcade0ea92c12e6ff90bbd23d8affected
  • 4488617e5e995a09abe4d81add5fb165674edb59 to < 7caefa2771722e65496d85b62e1dc4442b7d1345affected
  • e43dd2b1ec746e105b7db5f9ad6ef14685a615a4 to < 406bfc04b01ee47e4c626f77ecc7d9f85135b166affected
  • 3a7c1661ae1383364cd6092d851f5e5da64d476b to < 546ceb1dfdac866648ec959cbc71d9525bd73462affected
  • a2b01e65d9ba8af2bb086d3b7288ca53a07249acaffected
  • 6.8.12 to < 6.9affected

Linux Linux

Default version status: unaffected

  • 6.1.93 to < 6.1.95affected
  • 6.6.33 to < 6.6.35affected
  • 6.9.3 to < 6.9.6affected

References