CVE-2024-40938

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-40938
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40938.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-40938
Downstream
Related
Published
2024-07-12T12:25:14Z
Modified
2025-10-16T02:07:02.050286Z
Summary
landlock: Fix d_parent walk
Details

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix d_parent walk

The WARNONONCE() in collectdomainaccesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mounted, but the VFS check is done after the call to securitypathlink().

Do not use source directory's d_parent when the source directory is the mount point.

[mic: Fix commit message]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b91c3e4ea756b12b7d992529226edce1cfd854d7
Fixed
b6e5e696435832b33e40775f060ef5c95f4fda1f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b91c3e4ea756b12b7d992529226edce1cfd854d7
Fixed
cc30d05b34f9a087a6928d09b131f7b491e9ab11
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b91c3e4ea756b12b7d992529226edce1cfd854d7
Fixed
c7618c7b0b8c45bcef34410cc1d1e953eb17f8f6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b91c3e4ea756b12b7d992529226edce1cfd854d7
Fixed
88da52ccd66e65f2e63a6c35c9dff55d448ef4dc

Affected versions

v5.*

v5.18
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.10-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2024-40938-02cbdfb6",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc30d05b34f9a087a6928d09b131f7b491e9ab11",
        "signature_version": "v1",
        "target": {
            "file": "security/landlock/fs.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "213827556281678524905645535329192725830",
                "149690407061382769565452297628354641480",
                "154889461164160323304844178487350530255",
                "28784921119830855025601502702054131666",
                "171421861288920669046874264677195302232",
                "192426790225887767712289357592980806160",
                "131398699147959969849309332397366272505",
                "64027217528811153222041929079343977127",
                "305786860738208807675356862573592925233"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2024-40938-6ff329f7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7618c7b0b8c45bcef34410cc1d1e953eb17f8f6",
        "signature_version": "v1",
        "target": {
            "file": "security/landlock/fs.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "309792219104108564098316389873584763238",
                "149690407061382769565452297628354641480",
                "154889461164160323304844178487350530255",
                "28784921119830855025601502702054131666",
                "171421861288920669046874264677195302232",
                "192426790225887767712289357592980806160",
                "131398699147959969849309332397366272505",
                "64027217528811153222041929079343977127",
                "305786860738208807675356862573592925233"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2024-40938-7719ffc0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6e5e696435832b33e40775f060ef5c95f4fda1f",
        "signature_version": "v1",
        "target": {
            "file": "security/landlock/fs.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "213827556281678524905645535329192725830",
                "149690407061382769565452297628354641480",
                "154889461164160323304844178487350530255",
                "28784921119830855025601502702054131666",
                "171421861288920669046874264677195302232",
                "192426790225887767712289357592980806160",
                "131398699147959969849309332397366272505",
                "64027217528811153222041929079343977127",
                "305786860738208807675356862573592925233"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2024-40938-a7b6d871",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88da52ccd66e65f2e63a6c35c9dff55d448ef4dc",
        "signature_version": "v1",
        "target": {
            "file": "security/landlock/fs.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "309792219104108564098316389873584763238",
                "149690407061382769565452297628354641480",
                "154889461164160323304844178487350530255",
                "28784921119830855025601502702054131666",
                "171421861288920669046874264677195302232",
                "192426790225887767712289357592980806160",
                "131398699147959969849309332397366272505",
                "64027217528811153222041929079343977127",
                "305786860738208807675356862573592925233"
            ]
        },
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.1.95
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.35
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.6