In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mst: pass vlan group directly to brmstvlansetstate
Pass the already obtained vlan group pointer to brmstvlansetstate() instead of dereferencing it again. Each caller has already correctly dereferenced it for their context. This change is required for the following suspicious RCU dereference fix. No functional changes intended.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40921.json"
}[
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36c92936e868601fa1f43da6758cf55805043509",
"digest": {
"threshold": 0.9,
"line_hashes": [
"272999808569660086164935173558894712888",
"316863198861394797050225623641749254116",
"230890892895711946899809196295187312016",
"176166664081297397982523648342066273244",
"255123133793542906873013429996443317889",
"80027969473758032293270458608105758179",
"336461060015400848202997443747091285484",
"298132109416925545349570389028065093391",
"217123714473310868071523085735285592701",
"249170970267459232413864689309609973638",
"62678672673637507361158501599830333612",
"93200865631473729495585663441462538147",
"285945662378202932036707153828777808876",
"252671999835645455179005223707050892729",
"32549295415990531525414006571021916954",
"255239882900744568454004098708412379589",
"279804717318741631230954084036228048222",
"125487526541729180132043179698365601630",
"45367145092081491782917793666509851859"
]
},
"target": {
"file": "net/bridge/br_mst.c"
},
"id": "CVE-2024-40921-4251300a",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2dc02775fc0c4eacaee833a0637e5958884a8e5",
"digest": {
"function_hash": "80355169022385554592819759659805262646",
"length": 243.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_set_state"
},
"id": "CVE-2024-40921-4bdc3699",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09f4337c27f5bdeb8646a6db91488cc2f7d537ff",
"digest": {
"function_hash": "80355169022385554592819759659805262646",
"length": 243.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_set_state"
},
"id": "CVE-2024-40921-4f2b7a43",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2dc02775fc0c4eacaee833a0637e5958884a8e5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"272999808569660086164935173558894712888",
"316863198861394797050225623641749254116",
"230890892895711946899809196295187312016",
"176166664081297397982523648342066273244",
"255123133793542906873013429996443317889",
"80027969473758032293270458608105758179",
"336461060015400848202997443747091285484",
"298132109416925545349570389028065093391",
"217123714473310868071523085735285592701",
"249170970267459232413864689309609973638",
"62678672673637507361158501599830333612",
"93200865631473729495585663441462538147",
"285945662378202932036707153828777808876",
"252671999835645455179005223707050892729",
"32549295415990531525414006571021916954",
"255239882900744568454004098708412379589",
"279804717318741631230954084036228048222",
"125487526541729180132043179698365601630",
"45367145092081491782917793666509851859"
]
},
"target": {
"file": "net/bridge/br_mst.c"
},
"id": "CVE-2024-40921-5052208c",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cc9e9a651b9861efa068c164ee62dfba68c6ca",
"digest": {
"function_hash": "2424305139430088354879685226616556934",
"length": 662.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_set_state"
},
"id": "CVE-2024-40921-6bcc5d2c",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09f4337c27f5bdeb8646a6db91488cc2f7d537ff",
"digest": {
"threshold": 0.9,
"line_hashes": [
"272999808569660086164935173558894712888",
"316863198861394797050225623641749254116",
"230890892895711946899809196295187312016",
"176166664081297397982523648342066273244",
"255123133793542906873013429996443317889",
"80027969473758032293270458608105758179",
"336461060015400848202997443747091285484",
"298132109416925545349570389028065093391",
"217123714473310868071523085735285592701",
"249170970267459232413864689309609973638",
"62678672673637507361158501599830333612",
"93200865631473729495585663441462538147",
"285945662378202932036707153828777808876",
"252671999835645455179005223707050892729",
"32549295415990531525414006571021916954",
"255239882900744568454004098708412379589",
"279804717318741631230954084036228048222",
"125487526541729180132043179698365601630",
"45367145092081491782917793666509851859"
]
},
"target": {
"file": "net/bridge/br_mst.c"
},
"id": "CVE-2024-40921-6f328314",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36c92936e868601fa1f43da6758cf55805043509",
"digest": {
"function_hash": "80355169022385554592819759659805262646",
"length": 243.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_set_state"
},
"id": "CVE-2024-40921-6f406175",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cc9e9a651b9861efa068c164ee62dfba68c6ca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"272999808569660086164935173558894712888",
"316863198861394797050225623641749254116",
"230890892895711946899809196295187312016",
"176166664081297397982523648342066273244",
"255123133793542906873013429996443317889",
"80027969473758032293270458608105758179",
"336461060015400848202997443747091285484",
"298132109416925545349570389028065093391",
"217123714473310868071523085735285592701",
"249170970267459232413864689309609973638",
"62678672673637507361158501599830333612",
"93200865631473729495585663441462538147",
"285945662378202932036707153828777808876",
"252671999835645455179005223707050892729",
"32549295415990531525414006571021916954",
"255239882900744568454004098708412379589",
"279804717318741631230954084036228048222",
"125487526541729180132043179698365601630",
"45367145092081491782917793666509851859"
]
},
"target": {
"file": "net/bridge/br_mst.c"
},
"id": "CVE-2024-40921-79218eee",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cc9e9a651b9861efa068c164ee62dfba68c6ca",
"digest": {
"function_hash": "71212397065639160535242420911748766133",
"length": 359.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_sync_state"
},
"id": "CVE-2024-40921-9efe19f8",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2dc02775fc0c4eacaee833a0637e5958884a8e5",
"digest": {
"function_hash": "71212397065639160535242420911748766133",
"length": 359.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_sync_state"
},
"id": "CVE-2024-40921-a4e1c47d",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09f4337c27f5bdeb8646a6db91488cc2f7d537ff",
"digest": {
"function_hash": "71212397065639160535242420911748766133",
"length": 359.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_sync_state"
},
"id": "CVE-2024-40921-b7f843eb",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2dc02775fc0c4eacaee833a0637e5958884a8e5",
"digest": {
"function_hash": "2424305139430088354879685226616556934",
"length": 662.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_set_state"
},
"id": "CVE-2024-40921-c18721dd",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36c92936e868601fa1f43da6758cf55805043509",
"digest": {
"function_hash": "2424305139430088354879685226616556934",
"length": 662.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_set_state"
},
"id": "CVE-2024-40921-cf99a653",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6cc9e9a651b9861efa068c164ee62dfba68c6ca",
"digest": {
"function_hash": "80355169022385554592819759659805262646",
"length": 243.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_set_state"
},
"id": "CVE-2024-40921-d14d47d0",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09f4337c27f5bdeb8646a6db91488cc2f7d537ff",
"digest": {
"function_hash": "2424305139430088354879685226616556934",
"length": 662.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_set_state"
},
"id": "CVE-2024-40921-f0b6443a",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36c92936e868601fa1f43da6758cf55805043509",
"digest": {
"function_hash": "71212397065639160535242420911748766133",
"length": 359.0
},
"target": {
"file": "net/bridge/br_mst.c",
"function": "br_mst_vlan_sync_state"
},
"id": "CVE-2024-40921-ffd920d9",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40921.json"